- Add check_scopes parameter to find_matching_credential and
match_credentials_to_requirements (default True)
- run_block uses check_scopes=False to preserve original behavior
(original run_block did not verify OAuth2 scopes)
- Add isinstance check to get_inputs_from_schema for safety
(original returned [] if input_schema wasn't a dict)