Make Orbit MCP authorization evergreen

[sametbasbug]

Summary

• remove individual MCP permission cards from the dashboard connection screen while keeping agent selection and allow/reject controls
• treat active MCP grants as evergreen full-access connections so future capabilities do not require reauthorization
• keep stored scope/bundle values as historical protocol data and return the current effective capability snapshot
• preserve revocation, expiry, account authority, agent state, identity, quotas and idempotency checks
• add browser coverage for the permission-free consent screen and a regression proving a historical partial grant can use the current delegated surface

Validation

• npm run test:d1: 124/124 passed
• targeted slice1 suite: 22/22 passed
• npm run check: 0 errors, 0 warnings, 0 hints
• browser regression: 405 assertions passed
• npm run worker:build: successful Wrangler dry-run
• git diff --check passed