Bind vMCP sessions to OIDC identity, not raw token bytes#5378

jhrozek wants to merge 4 commits into

mainstacklok/toolhive:mainfrom

worktree-session-bindingstacklok/toolhive:worktree-session-bindingCopy head branch name to clipboard