fix(mcp): inject authorization bearer on the runtime MCP path (#3111)