mcpg-tunnel-agent

The tunnel agent's request engine: the accept loop that turns each tunnel-borne MCP request back into an http::Request, injects the relay-attested origin (ConnectInfo + a caller-supplied decorator for TLS), drives it through the gateway's own axum Router via oneshot, and streams the response — including SSE — back down the tunnel. Runs the full gateway request path with no local TCP listener.