Function session_authorization_scope 

fn session_authorization_scope(
    session: &SessionEntry,
) -> Option<Vec<CanonicalCallScope>>

Converts stored session scope into canonical form for authorization comparison.