Coderabbit fixes:

- Mac
- Flask debug
- Threaded flask
- propagate token in GET requests
- enhance spec docs
- normalize MAC x2
- mcp disablement redundant private attribute
- run all tests imports

test/test_mcp_disablement.py

@@ -9,10 +9,8 @@ from server.api_server import mcp_endpoint
 @pytest.fixture(autouse=True)
 def reset_registry():
     registry.clear_registry()
-    registry._disabled_tools.clear()
     yield
     registry.clear_registry()
-    registry._disabled_tools.clear()
 
 
 def test_disable_tool_management():