fix logout on refresh

src/lib/atproto/auth.svelte.ts

···
 			throw Error('session expired');
 		}
 
-		if (session.token.scope !== metadata.scope) {
+		const requestedScopes = metadata.scope.split(' ').filter((s) => !s.startsWith('include:'));
+		const tokenScopes = new Set(session.token.scope?.split(' '));
+		if (!requestedScopes.every((s) => tokenScopes.has(s))) {
 			throw Error('scope changed, signing out!');
 		}