/ test (pull_request) Successful in 23s
Adds an oidc-audience-mapper to the forte-cli client so its access tokens carry aud=https://mcp.drop.forteapps.net/mcp, the audience the forte-drop-mcp auth sidecar verifies. Fallback for the case where Keycloak ignores the RFC 8707 resource= parameter the skill sends. Stacks on #26. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>