- /version returns JSON with build_date and git_commit from env vars
- NixOS module injects GIT_COMMIT (first 8 chars of self.rev)
and BUILD_DATE (self.lastModified) into systemd service environment
- Route MCP streamable handler to /mcp via http.ServeMux
- Move /health to a dedicated mux route (no auth required)
- Simplify authMiddleware by removing /health special case
- Apply CORS middleware at the mux level
- Ignore nix build result symlink