Fixes /mcp rejecting every bearer token: the alias dispatched with the front-end's already-resolved anonymous user, so authenticated connector calls got 401 — surfaced as "This connector has no tools available". The alias now re-determines the user with the Authorization header present.