Svaiva Auth Service

OAuth 2.1 Authorization Server (P1a - localhost loopback).

• AS metadata: /.well-known/oauth-authorization-server
• Protected-resource metadata: /.well-known/oauth-protected-resource
• JWKS: /api/auth/jwks
• Authorize: /api/auth/oauth2/authorize
• Token: /api/auth/oauth2/token
• Dynamic client registration: /api/auth/oauth2/register

See README.md for setup and the MCP acceptance test.