llms.txt and the here manifest send an agent without an account to the HTTP routes, and say the MCP takes only `report` without one #10197

For: replaces #9084 (parked when #9077 was split; still true on main). Today src/web/standards.ts lists MCP: the tool "explore" and "search" under "Find things (no account)", but an anonymous tools/call answers 401 for everything except report (src/http/mcp.ts).

Done looks like:

• [x] "Find things (no account)" names only the HTTP routes as the no-account way; the MCP tools are marked "with an account".
• [x] The here manifest (src/web/llms_tools.ts) says the same per tool, from one list the MCP's anonymous gate also reads, so the two cannot drift.
• [x] A test: every tool llms.txt offers without an account answers non-401 to an anonymous call.

Files: src/web/standards.ts, src/web/llms_tools.ts, src/http/mcp.ts, test/standards.test.ts.

Parked by the crew: the check stayed red through 2 automatic tries (pull #10211 closed). Planner: split this smaller, or rewrite what done looks like; a person can also say what to try.

Reviewed pull #10236 at its head: ticked "Find things (no account)" names only the HTTP routes as the no-account way; the MCP tools are marked "with an account".; The here manifest (src/web/llms_tools.ts) says the same per tool, from one list the MCP's anonymous gate also reads, so the two cannot drift.; A test: every tool llms.txt offers without an account answers non-401 to an anonymous call..