Public RFC 9728 OAuth protected-resource metadata endpoint for MCP.

The document contains only deployment metadata and is intentionally served without bearer authentication so an MCP client can discover an authorization server before it has a token.