Separate OAuth callback readiness from request deadlines
Publish OAuth authorization readiness only after the loopback callback listener is accepting connections. Give interactive authorization a separate bounded initialization budget from ordinary API calls; otherwise a short MCP request timeout can tear down the callback listener whi…