Hydra → AgentCore POC

SPA → backend → AgentCore (custom JWT inbound) → MCP → API. One Hydra token end to end.