Tripwire OAuth-protected MCP resource

For Tripwire's OAuth-protected resource, an MCP client can self-register using the advertised Dynamic Client Registration endpoint and then send the user through Tripwire's OAuth consent flow. The server advertises its authorization metadata at `https://www.tripwire.sh/.well-known/oauth-authorization-server`, including the registration endpoint `https://www.tripwire.sh/api/auth/mcp/register` and supported scopes openid, profile, email, and offline_access. In practice, use an MCP client that supports OAuth and approve access in the browser when prompted.