hindsight-oauth-v1: OAuth front for Hindsight MCP. See /.well-known/oauth-protected-resource