Two new packages in Plain: plain.mcp and plain.oauthserver.

Together they mean an AI client can connect to your app as a real, authenticated user — PKCE, dynamic client registration, token rotation.