OAuth protected-resource metadata (delegated to better-auth)

Returns the RFC 9728 protected-resource metadata for the Charming API origin. Pointed at by the WWW-Authenticate header MCP returns on 401s so clients can discover the matching authorization server.

curl -X GET "https://charm.ing/.well-known/oauth-protected-resource"

const response = await fetch("https://charm.ing/.well-known/oauth-protected-resource", {
  method: "GET"
});

import requests

response = requests.get(
    "https://charm.ing/.well-known/oauth-protected-resource",
)

{}