We should be able to build an OAuth client already and get some primitive flow going where we end up with a set of tokens.

ie. use what exists for 3rd party OAuth apps for now until we have what's needed for MCP apps: "All of the backend for third party apps oauth access already exists at least in dev. Some mcp specific things are not there, but we can already start implementing some of the integration"

"It will not have a correct level of access (like it will get a token that has too much access), but it's decent first step and this doesn't need to leave cloud-dev"