OpenAI Apps

[jimaek]

First it sounds like we need to make MCP changes https://developers.openai.com/apps-sdk/build/mcp-server#advanced

1. Allow component-initiated tool access
2. Define component content security policies

Then implement the Apps related changes

1. oAuth changes https://developers.openai.com/apps-sdk/build/auth#custom-auth-with-oauth-21
2. Review tools to make sure they match the requirements https://developers.openai.com/apps-sdk/plan/tools