feat: add RBAC enforcement for MCP tools and API endpoints b65ef75 nothingworry commited on 17 days ago