toolchain router.
  /mcp     — reverse-proxy to the caller's pod
  /healthz — liveness