mcp-auth worker. Use /authorize (OAuth) or /.well-known/oauth-authorization-server.