Four root causes, 40+ hours of agent time, one MCP auth failure. The final fix was a one-line CLI command.