https://howtonotcode.com/story/1655-ship-oauth-protected-resource-metadata-on-your-mcp-servers