Pharmacy MCP v0.1.0 POST /mcp — JSON-RPC (OAuth bearer required) GET /login — bootstrap VTEX session GET /authorize — OAuth flow (for connector hosts)