OAuth 2.1 for the Agent Era: Authentication Without Browsers — headless.ly