nyssa-mcp: use POST /mcp com Authorization: Bearer <token do nyssa-auth>.