Feature/authentication system

[Rodriguespn]

Summary

This pull request adds a new OAuth flow to the MCP server for remote transports (sse and http). It introduces changes to how authentication and organization context are handled for remote and local environments.

Changes

• OAuth support for remote transports
• For remote (SSE and HTTP) transports, the server now supports OAuth.
• The access token is extracted from the Authorization header in incoming HTTP requests.
• API key required for local version
• The local version now requires an API key to function, as OAuth is only available for remote transports.
• The API key includes the organization_id, so there is no need to specify the org ID separately in local mode.
• Environment-based organization ID for the remote version
• The organization_id must be provided via an environment variable (ORGANIZATION_ID) for remote usage.

Breaking Changes

• Local usage now requires an API key.
• organization_id must be set via an environment variable for remote usage.
• Clients must be updated to conform to the new authentication mechanisms depending on the transport type.