v1.0.3
- Add OAuth discovery, dynamic client registration, authorization code + PKCE, token and refresh token endpoints for Claude remote MCP.\n- Protect /mcp with OAuth Bearer tokens and advertise protected-resource metadata via WWW-Authenticate.\n- Keep legacy /api/runTerminalScript behaviour unchanged.\n- Add form-urlencoded parser required by OAuth token exchange.