Function resolveScope

Resolve scope for multi-role user. Combines scopes via union:

• If any role has "all" scope → result is "all"
• If all roles resolve to same type → return that single scope
• Otherwise → compound { type: "multi", filters: [...] }