docs(auth): replace section symbol with ASCII in RFC 9728 comments

The README code snippet at L1024-1028 is run through ruff via pytest_examples.
On Windows the ruff subprocess pipe defaults to cp1252 and fails to decode the
\xc2\xa7 byte sequence, breaking the 10 Windows CI jobs with 'stream did not
contain valid UTF-8'. Linux and macOS pipes default to UTF-8 so they passed.

Replace \xc2\xa7 with the word 'section' across the four files I introduced it
in. Pre-existing \xc2\xa7 references elsewhere in the tree are unaffected.

Author: adityasingh2400

README.v2.md

@@ -1024,8 +1024,8 @@ mcp = MCPServer(
     # Auth settings for RFC 9728 Protected Resource Metadata.
     # `resource_server_url` MUST be the full public URL of the MCP endpoint, including
     # the transport path (e.g. `/mcp` for streamable-http, `/sse` for sse). RFC 9728
-    # §3.3 requires strict equality between the client's resource identifier and the
-    # `resource` value advertised in the protected resource metadata.
+    # section 3.3 requires strict equality between the client's resource identifier and
+    # the `resource` value advertised in the protected resource metadata.
     auth=AuthSettings(
         issuer_url=AnyHttpUrl("https://auth.example.com"),  # Authorization Server URL
         resource_server_url=AnyHttpUrl("http://localhost:3001/mcp"),  # Public MCP endpoint URL

examples/servers/simple-auth/mcp_simple_auth/server.py

@@ -128,7 +128,7 @@ def main(port: int, auth_server: str, transport: Literal["sse", "streamable-http
 
         # Create settings. server_url is the public URL of the MCP endpoint and must
         # include the transport path so it matches the URL the client used to reach
-        # the server (RFC 9728 §3.3 strict equality).
+        # the server (RFC 9728 section 3.3 strict equality).
         host = "localhost"
         transport_path = "/sse" if transport == "sse" else "/mcp"
         server_url = f"http://{host}:{port}{transport_path}"

examples/snippets/servers/oauth_server.py

@@ -24,8 +24,8 @@ async def verify_token(self, token: str) -> AccessToken | None:
     # Auth settings for RFC 9728 Protected Resource Metadata.
     # `resource_server_url` MUST be the full public URL of the MCP endpoint, including
     # the transport path (e.g. `/mcp` for streamable-http, `/sse` for sse). RFC 9728
-    # §3.3 requires strict equality between the client's resource identifier and the
-    # `resource` value advertised in the protected resource metadata.
+    # section 3.3 requires strict equality between the client's resource identifier and
+    # the `resource` value advertised in the protected resource metadata.
     auth=AuthSettings(
         issuer_url=AnyHttpUrl("https://auth.example.com"),  # Authorization Server URL
         resource_server_url=AnyHttpUrl("http://localhost:3001/mcp"),  # Public MCP endpoint URL

src/mcp/server/auth/settings.py

@@ -31,7 +31,7 @@ class AuthSettings(BaseModel):
             "Must include the transport path (e.g. https://example.com/mcp for "
             "streamable-http, https://example.com/sse for sse) so that the value "
             "advertised in protected resource metadata exactly matches the URL the "
-            "client used to reach the server. RFC 9728 §3.3 requires strict equality "
-            "between the client's resource identifier and this value."
+            "client used to reach the server. RFC 9728 section 3.3 requires strict "
+            "equality between the client's resource identifier and this value."
         ),
     )