test(oura): grant the workout and heartrate scopes in the callback fixture

The fixture granted the scopes Oura was asked for before workouts and
intraday heart rate joined; a full grant now names those two as well.

tests/integration/oauth-callback-single-use.test.ts

@@ -128,7 +128,7 @@ describe("Oura callback delivered twice", () => {
             refresh_token: "oura-refresh",
             expires_in: 86400,
             scope:
-              "extapi:daily extapi:personal extapi:spo2 extapi:heart_health extapi:stress",
+              "extapi:daily extapi:personal extapi:spo2 extapi:heart_health extapi:stress extapi:workout extapi:heartrate",
           }),
           { status: 200, headers: { "content-type": "application/json" } },
         );
@@ -169,7 +169,8 @@ describe("Oura callback delivered twice", () => {
           access_token: "oura-access",
           refresh_token: "oura-refresh",
           expires_in: 86400,
-          scope: "extapi:daily extapi:personal extapi:spo2 extapi:heart_health",
+          scope:
+            "extapi:daily extapi:personal extapi:spo2 extapi:heart_health extapi:workout extapi:heartrate",
         }),
         { status: 200, headers: { "content-type": "application/json" } },
       );