This package will hold externally visible parts of internal/oauthex. For now, just add an alias to the ProtectedResourceMetadata struct. This lets one write MCP-compliant servers.