onbench MCP broker (dev) — OK. See /.well-known/oauth-protected-resource