a practitioner post (title and premise as published; no measured results in the item) on trusted redirect URIs for MCP: how to let users bring their own MCP clients while keeping the authorization redirect from becoming a phishing vector. Directly relevant to any fleet surface that accepts external MCP clients.