Changed
- Update muster and muster-crds to v0.4.0 (via v0.3.14): muster now supports brokered RFC 8693 token exchange (giantswarm/muster#831) — external confidential clients can exchange a trusted-issuer subject token plus an
audienceparameter at/oauth/tokenfor a token minted by the audience’s downstream Dex. Newmuster.oauth.server.tokenExchangeBrokervalues block (per-client audience allowlist, audience → downstream Dex target mapping); mcp-oauth bumped to v0.3.0. Inert by default.