Standalone OAuth helper for MCP servers with client allowlists (Figma, etc.) - works with OpenCode without forking