JetState hosted MCP

This is the JetState remote MCP door. Point an OAuth-capable MCP client at /mcp; discovery is at /.well-known/oauth-authorization-server.