OAuth 2.0 Protected Resource Metadata endpoint (RFC 9728). Used by MCP clients to discover authorization servers protecting this resource.