Add a bearer-protected streamable HTTP MCP ASGI entrypoint for production deployment.
Includes remote host/origin configuration, health checks, fallback token handling, documentation, and tests covering authentication behavior.
Verified with full local pytest suite and GitHub CI. Copilot review feedback addressed before merge.