- Keep PR1 strictly read-only: drop the scope selector, the read_write
request rule and mcp:write granting from the UI/controller (the write scope
returns with the write tools in PR2). Removes a token that could be minted
over-privileged with a false "can edit data" UI promise.
- Gate via User::canUseFeature(PlanFeature::McpAccess) instead of hasProPlan()
directly, matching the existing feature-gating convention.
- Confirm token rotation behind an AlertDialog (it breaks connected clients),
matching revoke; drop the silent on-load clipboard auto-copy.
- Give the data-egress disclaimer a destructive variant for visual weight.
- Extract the duplicated token-ownership check; document the controller-reuse
coupling and the shared-tenant space-scoping model; fix ListSpaces N+1 and a
duplicate output key.
fcf5e6e46f