Fix: remote MCP server returns 401 invalid_token because the token's aud doesn't match the canonical server URL
OAuth succeeded but every MCP call gets 401 invalid_token? Make the PRM resource, the token's aud and your validator agree on one canonical server URL.