Fixes the multi-user-basic regression introduced by the previous bump: the astrolabe app's hard https-refusal blocked sending the app password to the in-cluster http MCP endpoint (http://mcp-multi-user-basic:8000), so background indexing never ran. Now warns instead of blocking; also clears the SonarCloud S5332 hotspot on the dropped test's http literal. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>