Adds `OAuth2\Storage\ClientInterface` to constructor so we can validate client scope.

It's a rather large dependency to introduce, but we absolutely must ensure client scopes are validated, so this is the best option I have found