Fix MCP tools list to properly include business services

- Remove artificial McpServices.* exclusion that was preventing business services from appearing
- The 'recursion threat' was a thinko - MCP protocol prevents actual recursion
- Trust permissions system to control access instead of hardcoded exclusions
- Now McpServices.list#Products appears in tools list alongside other permitted services
- Clean separation: permissions control access, not artificial filtering

This fixes the core issue where business services were hidden from tools/list
despite having proper security permissions.

@@ -554,10 +554,7 @@
                     
                     // Now add all other services the user has permission to access
                     for (serviceName in allServiceNames) {
-                        // Skip internal MCP services to avoid recursion (already handled above)
-                        if (serviceName.startsWith("McpServices.")) {
-                            continue
-                        }
+                        // Permissions system already controls access, no need for artificial exclusions
                         
                         // Check permission using original user context
                         boolean hasPermission = userHasPermission(serviceName)