Building a permission-aware MCP server in Python

Audience checks, per-tool scopes and tool annotations with the official MCP Python SDK, plus the spec rules that most first implementations get wrong.