hummingbird awsmcp: MCP at /mcp, OAuth at /authorize and /oauth/token, OpenID at /oidc