sherpa brain — credentialed knowledge endpoint.
  humans:   add /mcp as a custom connector (sign in with GitHub)
  machines: POST /gw/mcp with a tenant key (Authorization: Bearer … or X-API-Key)
  webhooks: POST /v1/screen  { address } with the same tenant key — flat JSON out