Enterprise-managed auth for MCP: Claude can now issue the identity assertion — Blankdot