A tool name is a label: MCP authorization needs identity, not a string — NullRun