feat(mcp): connect authenticated AquaPortal tools to Vocero (#1)

Vocero needs to query AquaPortal on behalf of the caller selected by the existing phone link. This adds server-owned conversations and MCP tool execution for voice and HTTP reasoning while leaving the speech pipeline unchanged.

Release notes:

- Added browser-bound conversations that keep backend credentials server-side and isolate callers.
- Connected the eight-tool AquaPortal catalog through authenticated Streamable HTTP with full input schemas and structured results.
- Added bounded multi-step tool execution with cancellation, expiry, and stale-result protection.
- Updated browser bootstrap, tool progress, reasoning headers, and conversation cleanup.
- Disabled legacy unscoped content preloads in MCP mode and documented configuration and deployment constraints.
- Preserved disabled-mode contracts and added local SDK, WebSocket, and browser regression coverage.

Reviewed-on: AquaPortal/s2s#1

vocero-api/vocero_api/core/logging.py

@@ -22,6 +22,9 @@ if not _logging_configured:
     logging.getLogger("uvicorn").setLevel(logging.DEBUG if _is_debug else logging.INFO)
     logging.getLogger("uvicorn.access").setLevel(logging.DEBUG if _is_debug else logging.INFO)
     logging.getLogger("httpcore").setLevel(logging.DEBUG if _is_debug else logging.WARNING)
+    # The MCP SDK logs raw protocol messages and error bodies. Our integration
+    # reports safe operation metadata and public errors at its own boundary.
+    logging.getLogger("mcp").setLevel(logging.CRITICAL)
     logger.setLevel(logging.DEBUG if _is_debug else logging.DEBUG)  # s2s always uses at least DEBUG in development
     _logging_configured = True
     logger.debug(