Explain how Business Groups and environments scope client applications, contracts, and the configured client provider — client provider/identity configuration is set at the master organization/root level and inherited by Business Groups — and predict how this scoping determines which clients and credentials are valid for an API instance in a given environment.