Add a package for the extensions to OAuth 2.0 required by MCP. This first PR adds Protected Resource Metadata.