GO-2026-5390: MCP Gateway: Authority-injection and JWT/session… · Watchpost