Custom gateway activity page can race WebSocket hello when client.connected only means raw socket open

Harden a custom chat activity page against CSP eval, polling storms, cache duplication, and fallback error stubs

Add opt-in real [redacted:name] blind crawl e2e for registration discovery

Add tracked MCP plugin config and crawler-oriented MCP e2e coverage