feat: authenticate mcp tool calls (#75) (1bcc929) fix(testing): validate the idle session case in a fixed order (#72) (27e03ab)