Get the scopes of a profile reachable through a requestable tag

For the tag access request flow only. Authorized by the tagrequest.profile.view action. Read-only; the scope updates served by /api/paps/{papId}/scopes are not exposed on this path.