OAuth callback for MCP server authorization

Receives the authorization code after the user consents at the OAuth provider. Exchanges the code for tokens using the MCP SDK’s auth module, stores them, and closes the popup window.