offline_access 기본 강제 제거 및 refresh_token grant 정책 정리

backend/internal/handler/auth_handler.go

@@ -8430,7 +8430,7 @@ func buildHydraAuthorizationURL(clientID string, scopes []string, redirectURIs [
 	seen := map[string]struct{}{}
 	for _, scope := range append([]string{"openid"}, scopes...) {
 		scope = strings.TrimSpace(scope)
-		if scope == "" || isLegacyRefreshTokenScopeAlias(scope) {
+		if scope == "" || isRefreshTokenScopeAlias(scope) {
 			continue
 		}
 		if _, ok := seen[scope]; ok {