Return stable mutation summaries

Fix structured mutation results

Harden OAuth validation and private repo file handling

Implement full OAuth-protected Hugging Face MCP server