Scopes not obeyed in preview environments

When using preview environments with custom authentication, scopes are not obeyed in the configuration.

**To Reproduce**
Steps to reproduce the behavior:

1. Have auth block set to
```json
"auth": {
"rolesSource": "/api/GetRoles",
"identityProviders": {
"azureActiveDirectory": {
"registration": {
"openIdIssuer": "https://login.microsoftonline.com/{tenant-id}/v2.0",
"clientIdSettingName": "AZURE_CLIENT_ID",
"clientSecretSettingName": "AZURE_CLIENT_SECRET"
},
"scopes": ["openid", "profile", "email", "https://graph.microsoft.com/User.Read"]
}
}
}
```
1. Using github in a PR, have SWA action push to a preview environment
2. Once deployed go to preview environment

**Expected behavior**
Notice that the scopes are set to only `opened profile email` and does not include the `User.Read` when viewing the Network tab in F12 dev tools.

```[tasklist]
### Tasks
- [ ] Add better documentation around needing the User.Read.All role included in MS Graph permissions on App Registration.
```