refactor(mcp): MCP_HTTP_TOKEN → MCP_HTTP_SHARED_SECRET — זהה לשם ב-Infisical

הסוד נוצר ב-All Infrastructure / env main / /apps/legal-ai בשם
MCP_HTTP_SHARED_SECRET, מתויג credentials, לפי הדפוס של שני טוקני-הגשר
שכבר שם: COURT_FETCH_SHARED_SECRET ו-LEGAL_CHAT_SHARED_SECRET.

שם זהה בקוד וב-Infisical = אין מיפוי שצריך לזכור.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

mcp-server/src/legal_mcp/services/http_auth.py

@@ -38,9 +38,14 @@ from mcp.server.auth.provider import AccessToken, TokenVerifier
 
 logger = logging.getLogger("legal_mcp.http_auth")
 
-#: Environment variable carrying the shared bearer token. Populated from
-#: Infisical by the service unit — see docs/spec/X10-deploy-env-secrets.md.
-TOKEN_ENV = "MCP_HTTP_TOKEN"
+#: Environment variable carrying the shared bearer token.
+#:
+#: Name matches the Infisical key exactly — All Infrastructure / env `main` /
+#: `/apps/legal-ai` / ``MCP_HTTP_SHARED_SECRET``, tagged ``credentials``. Keeping
+#: the two identical means nobody has to hold a mapping in their head, and it
+#: follows the two bridge tokens already in that folder
+#: (``COURT_FETCH_SHARED_SECRET``, ``LEGAL_CHAT_SHARED_SECRET``).
+TOKEN_ENV = "MCP_HTTP_SHARED_SECRET"
 
 #: Minimum acceptable token length. Short tokens are brute-forceable; refusing
 #: them at startup is cheaper than discovering it from an access log.