MCP OAuth

Changes to OAuth redirect target. Exchanges code -> tokens and redirects back to dashboard.

get/api/mcp-oauth/callback