feat: add RBAC enforcement for MCP tools and API endpoints b65ef75 nothingworry commited on Nov 27, 2025