There is a hypen missing in this segment ahead of "scopes":
az ad sp create-for-rbac --role="Contributor" -scopes="/subscriptions/<subscription-id>"
Should be:
az ad sp create-for-rbac --role="Contributor" --scopes="/subscriptions/<subscription-id>"
I hope this is helpful