PRM endpoint incorrectly configured

[localden]

If a server is hosted on:

http://localhost:3000/mcp

The PRM document is made available on:

http://localhost:3000/.well-known/oauth-protected-resource

However, if we follow the RFC 9728, it should be:

http://localhost:3000/.well-known/oauth-protected-resource/mcp

getOAuthProtectedResourceMetadataUrl is responsible for computing this.