feat: add RBAC enforcement for MCP tools and API endpoints b65ef75 nothingworry commited on 18 days ago