use Audience;
/// Resolves the audience used to validate a token's `aud` claim.
///
/// Audience validation is enabled by default: when no explicit audience is
/// provided, the resource identifier (`mcp_server_url`) is used. It is disabled
/// only when `disable` is set, which is strongly discouraged.