a87384b479
- cpURL() no longer falls back to apiURL (tenant host), preventing CP_ADMIN_API_TOKEN from being sent to the wrong service. - MintWorkspaceToken now calls /admin/workspaces/:id/tokens (AdminAuth) instead of /workspaces/:id/tokens (WorkspaceAuth), matching the MCP implementation and the server router. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>