Andersen RAG server.
  /mcp/         — MCP streamable HTTP transport
  /admin/       — admin endpoints (requires token)
  /healthz      — liveness probe
  /docs         — OpenAPI for admin routes