Grouped (namespaced) servers should expose OAuth 2.1 endpoints for authentication

[muliyul]

The grouped MCP servers should act as Resource servers (forward the correct headers to the underlying MCP server they call) and expose the necessary endpoints for the client to authenticate.

For more info see this