261b0f8240
Adds the proxied-callback option to the remote/headless OAuth section, links the mcp-oauth-remote-gateway skill for fully headless gateways, and documents the WAF pitfall behind redirect_host.