MCP now shares the REST hostname (routed by path), matching the /catalog/v1 rework — no second TLS listener/certificate needed.