Add oauth proxy and supporting ecr infra

images/mcp-auth-proxy/Dockerfile

@@ -0,0 +1,26 @@
+FROM golang:1.22-bookworm AS builder
+
+ENV GOTOOLCHAIN=auto
+
+# Pin to a specific release tag
+ARG VERSION=v2.10.2
+
+WORKDIR /app
+RUN git clone --depth 1 --branch ${VERSION} https://github.com/sigbit/mcp-auth-proxy .
+RUN go mod download
+
+ARG TARGETARCH
+ARG TARGETOS
+RUN CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH \
+    go build -trimpath -ldflags "-w -s" -o /app/bin/mcp-auth-proxy .
+
+FROM debian:bookworm-slim
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates curl \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY --from=builder /app/bin/mcp-auth-proxy /usr/local/bin/mcp-auth-proxy
+ENV DATA_PATH=/data
+
+ENTRYPOINT ["/usr/local/bin/mcp-auth-proxy"]

images/mcp-auth-proxy/README.md

@@ -0,0 +1,11 @@
+# mcp-auth-proxy image
+
+Builds [sigbit/mcp-auth-proxy](https://github.com/sigbit/mcp-auth-proxy) v2.10.2 for the dumpnet ECR registry.
+
+To update the version, change `ARG VERSION` in the Dockerfile and rebuild.
+
+## Build & Push
+
+```bash
+make build-mcp-auth-proxy
+```