Tagged authorization check.
Scope checks retain enough structure for the HTTP boundary to produce an
insufficient_scope challenge. Capability and application checks remain
opaque so their denial details cannot leak through component discovery.
Summary
Types
@type t() :: %FastestMCP.Authorization.Check{ kind: :scopes | :capabilities | :opaque, value: MapSet.t(String.t()) | {:resolver, (FastestMCP.Authorization.Context.t() -> any())} | function() }