"""MCP OAuth 2.1 authorization-server package.

Helix co-hosts an OAuth 2.1 Authorization Server alongside the MCP
resource server so AI agents (Claude connectors, Cursor, etc.) can
self-onboard via the standard discovery + PKCE + dynamic-client-
registration flow — no admin-issued PAT required. See
``docs/api/external-api.md`` § "Claude / MCP connector (OAuth)".
"""