* fix(ai): enforce resource authz when loading MCP tools in agent worker
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
* test: describe MCP authz test invariants instead of drafting history
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>