MCP agent identity is becoming a protocol priority. This guide separates stable authorization from draft workload identity, delegation, and DPoP work.