Add documentation around OAuth/Personal Access Token scopes.

What does this MR do?

Add documentation around OAuth token / Personal Access Token scopes, added in !5951 (merged).

Related Issues

• Closes #25851 (closed)