MabCoin Platform — Sprint-0

Foundation & Multi-Tenancy scaffold (Epic 1). See docs/blueprint/16-cto-execution-plan.md and docs/blueprint/17-edge-native-sprint0-adaptation.md.

• GET /api/health
• POST /api/tenants
• POST /api/auth/signup (18+ age-gate enforced)
• POST /api/auth/login
• POST /api/sessions (requires Bearer token)
• GET /api/sessions/:id/report (requires Bearer token, mock report)
• GET /api/sessions/:id/timeline (requires Bearer token, ordered TimelineEvent list)
• POST /api/challenges (requires Bearer token, AI-generated Programming Challenge)
• GET /api/challenges / GET /api/challenges/:id (requires Bearer token)
• POST /api/challenges/:id/submit (requires Bearer token, writes a linked ReasoningSession)
• ALL /mcp — MCP (Model Context Protocol) Streamable HTTP server exposing the above as tools for MCP-speaking clients (Epic 1.6, see src/mcp/server.ts)
• POST /telegram/webhook — Telegram "MabCoin Developer Console" bot webhook target for @Mymabcoinbot (see src/routes/telegram.ts)