OAuth scopes should have (translatable) descriptions

Currently our web UI only gives out the name of the scope, without ever explaining what it does. It should, instead, have an explanation.