cascade-mcp + oauth: see /healthz, /.well-known/oauth-protected-resource