Lumen MCP OAuth bridge. POST to /mcp with a valid bearer token.