Normalize unscoped Grant responses

[nkavian]

Summary

• Accept missing or null Grant response scopes and normalize them to an empty array.
• Sync specification fixtures and add validation coverage.
• Use stable, quiet Vitest output across packages.

Verification

• pnpm verify
• pnpm check-publish