Add OAuth support for MCP Server to reduce reliance on long-lived API keys