52 commands, 3 doors: the app, REST and MCP share one write path

My ticket tracker has three ways in: the app, a REST API and an MCP server. All three call the same 52 commands, and Firestore rules deny every other