Merge remote-tracking branch 'origin/v2/main' into v2/fix/2172-oidc-discovery-compat

Signed-off-by: cliffhall <cliff@futurescale.com>

# Conflicts:
#	README.md
#	core/mcp/inspectorClient.ts
#	test-servers/src/test-server-oauth.ts

test-servers/src/composable-test-server.ts

@@ -685,6 +685,14 @@ export interface ServerConfig {
      * Whether to support refresh tokens (default: true)
      */
     supportRefreshTokens?: boolean;
+
+    /**
+     * Whether to advertise and serve the RFC 7009 `revocation_endpoint`
+     * (default: true). Set to `false` to reproduce an authorization server that
+     * offers no revocation, where the Inspector must send nothing and clear
+     * local state exactly as it always has. (#2144)
+     */
+    supportRevocation?: boolean;
   };
   /**
    * Serve the modern (2026-07-28) protocol era via the SDK's