Live Bug Hunting: I Found MCP OAuth Account Takeover