mcp-auth v0.4.2

What's Changed

• fix(auth): atomically bind refresh clients and audit family revocation by @Agent-Hellboy in #16
• Allow MCP OAuth scopes per resource by @Agent-Hellboy in #19

Full Changelog: v0.4.1...v0.4.2