Scope can be assigned even if it is not existing

[bertschronja]

Issue

ClientScopes (ApiScopes and IdentityResources) can be assigned to clients even if the scopes do not exist. Same applies for ApiResourceScopes that are not created in table ApiScopes.

Steps to reproduce

Assign an ApiScope to a client (do NOT create it in ApiScopes)

[leastprivilege]

For context: you mean in the EF entity model.