Global scopes and look for token with broader scope in the cache

[jonesbusy]

Description

Handle global scope like aws and lookup for broader scope (typically a PUSH when we pull)

Testing done

CI

Submitter checklist

• I have read and understood the CONTRIBUTING guide
• I have run mvn license:update-file-header, mvn spotless:apply, pre-commit run -a, mvn clean install before opening the PR

[codecov]

Codecov Report

❌ Patch coverage is 84.93151% with 11 lines in your changes missing coverage. Please review.
✅ Project coverage is 87.35%. Comparing base (756891c) to head (2c6b8c2).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
src/main/java/land/oras/auth/TokenCache.java	84.44%	4 Missing and 3 partials ⚠️
src/main/java/land/oras/auth/Scopes.java	78.94%	0 Missing and 4 partials ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##               main     #633      +/-   ##
============================================
+ Coverage     86.67%   87.35%   +0.67%     
- Complexity      879      902      +23     
============================================
  Files            43       43              
  Lines          2695     2752      +57     
  Branches        344      351       +7     
============================================
+ Hits           2336     2404      +68     
+ Misses          215      200      -15     
- Partials        144      148       +4     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.