https://celery94.github.io/posts/secure-mcp-oauth-desktop-client-entra-id/