Remote MCP server with auth gated by Azure API Management