chore(mcp): switch MCP endpoints to HTTPS domain URLs

Brain and supervisor now behind NPM with Let's Encrypt. Use canonical
hostnames (brain-mcp.d-ma.be, supervisor-mcp.d-ma.be) over NodePorts so
connections work across networks without Tailscale for DNS.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.mcp.json

@@ -2,14 +2,17 @@
   "mcpServers": {
     "supervisor": {
       "type": "http",
-      "url": "http://koala:30320/mcp",
+      "url": "https://supervisor-mcp.d-ma.be/mcp",
       "headers": {
         "Authorization": "Bearer ${SUPERVISOR_MCP_TOKEN}"
       }
     },
     "brain": {
       "type": "http",
-      "url": "http://koala:30330/mcp"
+      "url": "https://brain-mcp.d-ma.be/mcp",
+      "headers": {
+        "Authorization": "Bearer ${BRAIN_MCP_TOKEN}"
+      }
     }
   }
 }