How I wired a self-hosted RAG server into claude.ai as a custom connector using Cloudflare Access, service tokens, and an OAuth portal, no port forwarding.