Bifrost's MCP flaw shows the protocol still has no client-authentication story

Two critical vulnerabilities, one root cause, and the piece of MCP that is supposed to close this gap.