Update prod scope

[gwharris7]

This pull request updates the authentication scope used for observability in the production environment. The change ensures that the correct resource identifier is used for authentication.

Authentication scope update:

• Changed the value of PROD_OBSERVABILITY_SCOPE in environment_utils.py to use a resource-specific identifier instead of a generic default scope.

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[Copilot]

Pull request overview

This PR updates the production authentication scope returned by the runtime environment utilities for use when acquiring tokens to export observability telemetry.

Changes:

• Updated PROD_OBSERVABILITY_SCOPE to a new api://.../Agent365.Observability.OtelWrite scope value.

[Copilot]

The new PROD_OBSERVABILITY_SCOPE value is an explicit permission scope (…/Agent365.Observability.OtelWrite) rather than a resource /.default scope. If callers obtain tokens via client-credentials/managed identity flows, Azure AD typically requires requesting api://<app-id>/.default and will reject individual delegated scopes. Please confirm the intended auth flow for observability export and either switch this constant to the correct /.default scope or document/rename to make it clear this is a delegated scope that requires user context.

Suggested change

	PROD_OBSERVABILITY_SCOPE = "api://9b975845-388f-4429-889e-eab1ef63949c/Agent365.Observability.OtelWrite"
	PROD_OBSERVABILITY_SCOPE = "api://9b975845-388f-4429-889e-eab1ef63949c/.default"

[nikhilNava]

Thanks. Closing this PR as implemented below
#235