feat(mcp): подготовить сервер и доступ к приёмке

docs/ux-ui/acceptance/secret203-sql-2026-10-13.json

@@ -0,0 +1,75 @@
+{
+  "date": "2026-10-13",
+  "block": "12.5.203",
+  "database": "mm_accept_166_1791883862303",
+  "scope": "Actual compiled buildApp/auth/GET handlers and own restricted PostgreSQL with nonempty synthetic credentials; isolated signed test JWT, not real Portal login",
+  "cases": [
+    {
+      "role": "reader",
+      "path": "/api/backups/storage",
+      "status": 200,
+      "syntheticSecretExposed": false,
+      "configuredFlag": true
+    },
+    {
+      "role": "reader",
+      "path": "/api/evobgp/settings",
+      "status": 403,
+      "syntheticSecretExposed": false,
+      "configuredFlag": false
+    },
+    {
+      "role": "reader",
+      "path": "/api/alerts",
+      "status": 200,
+      "syntheticSecretExposed": false,
+      "configuredFlag": true
+    },
+    {
+      "role": "admin",
+      "path": "/api/backups/storage",
+      "status": 200,
+      "syntheticSecretExposed": false,
+      "configuredFlag": true
+    },
+    {
+      "role": "admin",
+      "path": "/api/evobgp/settings",
+      "status": 200,
+      "syntheticSecretExposed": false,
+      "configuredFlag": true
+    },
+    {
+      "role": "admin",
+      "path": "/api/alerts",
+      "status": 200,
+      "syntheticSecretExposed": false,
+      "configuredFlag": true
+    },
+    {
+      "role": "unauthenticated",
+      "path": "/api/backups/storage",
+      "status": 401
+    },
+    {
+      "role": "unauthenticated",
+      "path": "/api/evobgp/settings",
+      "status": 401
+    },
+    {
+      "role": "unauthenticated",
+      "path": "/api/alerts",
+      "status": 401
+    }
+  ],
+  "passed": true,
+  "externalRequests": 0,
+  "storedSyntheticSecretsUnchanged": true,
+  "cleanup": {
+    "ownedDatabaseRoleContainerRemoved": true
+  },
+  "bounds": [
+    "No S3/EvoBGP connection or Telegram send tested",
+    "Known DTO fields only; binary backups/exports and arbitrary embedded error credentials not audited"
+  ]
+}