Clarify that the roles scope is expected to be useful for our client

Author: mjrousos

src/IdentityServer4Authentication/Stores/CustomClientStore.cs

@@ -20,12 +20,12 @@ public class CustomClientStore : IClientStore
                 AllowedScopes = new[]
                 {
                     "officeOwner",
+                    StandardScopes.Roles.Name,
 
                     // Allow these to be requested even though they don't do anything
                     StandardScopes.OpenId.Name,
                     StandardScopes.Email.Name,
                     StandardScopes.Profile.Name,
-                    StandardScopes.Roles.Name,
                 }
             }
         };