gavin-mcp: TLS + reachability OK