BEGIN;
CREATE TABLE IF NOT EXISTS mcp_unauthorized_buckets (
 bucket timestamptz NOT NULL, client_hash text NOT NULL, reason text NOT NULL,
 attempts integer NOT NULL DEFAULT 1, PRIMARY KEY(bucket,client_hash,reason)
);
COMMIT;