Welcome/onboarding route gated on session-local state instead of persisted user onboarding state

Zero-friction agent onboarding through anonymous REST adapters and lazy registration

Implementing anonymous MCP access requires per-tool buckets plus discovery-doc alignment