Centrally manage authorization for MCP connectors

Admins can now provision MCP connectors via their identity provider, starting with Okta, for zero-touch setup. Built on an open extension to the Model Context Protocol, it ensures connectors work consistently across Claude chat, Claude Code, and Cowork.