v0.60.0: Safer web fetch routing and MCP OAuth issuer checks

Improves web-fetch destination validation and enforces RFC 9207 issuer identification in MCP OAuth.