Task: OAuth Resource Server Classification

[ezynda3]

Priority: Medium
Breaking Change: Yes (for OAuth implementations)

Description: MCP servers are now classified as OAuth Resource Servers only, with Protected Resource Metadata for Authorization Server discovery.

Implementation Tasks:

• Implement Protected Resource Metadata (RFC 9728) support
• Add Authorization Server discovery mechanisms
• Update OAuth flow to separate Resource Server and Authorization Server roles
• Add WWW-Authenticate header support
• Update security documentation
• Add examples for enterprise OAuth deployments

Files to Update:

• client/oauth.go
• server/ (OAuth-related files)
• Add new OAuth utilities

[MOmarMiraj]

This would be an awesome addition to the repo! Would love to help where I can