Adds a signed DELETE helper so MCP clients can wipe stored upstream OAuth
tokens for a resource (useful in testing to force a fresh OAuth flow).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>