victor-brain: read-only MCP endpoint at /mcp (OAuth required).