M13: harden MCP trust boundary

backend/tests/test_auth.py

@@ -75,7 +75,7 @@ def test_demo_reset_preserves_integration_telemetry(ops_client, client):
         "/api/v1/integrations/mcp/operations-summary",
         headers={
             "X-Service-Token": settings.mcp_hub_service_token,
-            "X-Client-Id": "reset-probe",
+            "X-Client-Id": "itworx-mcp-hub:mobilityops:reset-probe",
         },
     )
     assert probe.status_code == 200
@@ -83,4 +83,4 @@ def test_demo_reset_preserves_integration_telemetry(ops_client, client):
 
     assert client.post("/api/v1/demo/login", json={"role": "operations_manager"}).status_code == 200
     events = client.get("/api/v1/audit", params={"action": "mcp_tool_request"}).json()
-    assert any(event["actor_label"] == "reset-probe" for event in events)
+    assert any(event["actor_label"].endswith(":reset-probe") for event in events)