onbench MCP broker spike — OK (see /.well-known/oauth-protected-resource)