f35707c9f3
Self-review caught a contradiction: the spec's prose said 'MCP_SERVICES="" (empty) -> zero services mount' but the code example in the spec used 'if not raw: return services' which conflates unset and empty (both fall through to 'all mount'). Fix: _filter_by_env now uses 'MCP_SERVICES' not in os.environ to distinguish unset (backward compat: all mount) from empty (explicit choice: zero mount). Test cases already specified the correct behavior. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>