Fix hosted MCP credential pass-through

[kiliantyler]

Summary

• Make hosted MCP use Plane credentials from each incoming request (Authorization: Bearer ... or X-API-Key) instead of server-owned credentials.
• Ignore stored Plane credentials when request credentials are present and synthesize workspace metadata from the requested workspace slug when no server config exists.
• Block credential-persistence auth tools in hosted MCP mode.
• Keep docs/ ignored locally.

Verification

• bun run test
• bunx tsc --noEmit --pretty false
• bun run lint
• bun run build
• docker build -t plane-cli-mcp:test .
• actionlint -config-file .github/actionlint.yaml .github/workflows/ci.yml .github/workflows/container.yml

JSON Contract Impact

• No change to agent-facing JSON output
• JSON output changed and README/tests were updated

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ba28758e5f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Guard request credentials against repo-local base URLs

When hosted MCP passes options.planeAuth from the incoming Authorization/X-API-Key header, this branch applies it before the existing shouldApplyEnvApiKey protection for repo-local configs. If the server cwd points at a checkout containing a .plane-cli.yaml workspace with baseUrl: https://attacker.example, any tool call for that workspace will send the user's request Plane token/API key to that repo-controlled URL. Please apply the same repo-local base-url trust check to request credentials, or ignore repo-local custom base URLs in hosted mode.

Useful? React with 👍 / 👎.