image MCP: POST /mcp (Bearer required); GET /files/<id>