Blocked on https://github.com/modelcontextprotocol/registry/issues/85 E.g. domain expires, someone else buys it; we'd need to make sure the old owners don't still have access. We'd should not invalidate historical packages that exist, but we should display a warning to anyone who requests information about them.