A happy-path MCP demo proves almost nothing about tenant isolation

Most MCP demos look the same. A tool is registered. A client calls it. The tool returns the expected...