Permission escalation: `onedrive.readonly` returns `onedrive.readwrite` scope

[hassan254-prog]

When requesting only for onedrive.readonly scope during OAuth authorization, the returned access token includes both onedrive.readonly and onedrive.readwrite. This effectively grants write permissions, even though only read-only access was requested. The consent screen also mentions the app has access to access to open and edit OneDrive files.