RReg rev 02: https://docs.kantarainitiative.org/uma/ed/oauth-resource-reg-2.0-02.html

I closed issues #235 and #236 from Sarah on RReg. We haven't been very disciplined about closing issues that have been implemented and thoroughly discussed in Core, but there's really quite a lot of them that could be closed by now; I'll plan to do that shortly.

Biggest changes this time around/food for thought for our call this Thursday:

• Token profiling in Core
• Lots of rhetorical/conceptual changes in the front part of Core (please read through -- new ASCII art!)
• Scope set math is fully on the docket!
• Assumption: Only one grant is in use at a time
• Assumption: Client-requested scopes are intended to apply only to the apparent resource that the client attempted to access (since they can't know about resource IDs) ??
• Question: What should guide RS's in requesting permissions on behalf of a client?