A test pins MCP `asked`: `show` and `order` take only their known values, and a repository the caller cannot read lists nothing #7168

src/http/mcp/tools/asked.ts refuses invalid_show and invalid_order, and no test names either. Each case calls the tool through /mcp with a real token, as test/mcp.test.ts does.

Done:

• [ ] A new test: with no arguments it lists unshipped asks, oldest first. show: "all" and each known order return the same set the /asked page shows for those choices.
• [ ] show: "everything" is invalid_show, and order: "random" is invalid_order.
• [ ] repo naming a private repository the caller cannot read lists nothing about it.

Files: test/mcp-asked-args.test.ts

If the test finds the behaviour wrong, fix the module it names in the same pull and say so. If the check fails in a test this pull does not touch, name it in the pull rather than widening the change.

Before pushing: bun x tsc --noEmit and the new test.