fix(api): access log keeps the mcp path but not its query, the token rode in it

backend/src/api/app.py

@@ -9,6 +9,7 @@ from fastapi.responses import FileResponse, RedirectResponse
 from fastmcp.utilities.lifespan import combine_lifespans
 from starlette.applications import Starlette
 
+from api.access_log import hide_mcp_query
 from api.auth import BearerAuthMiddleware
 from api.mcp.server import mcp
 from api.realtime import hub
@@ -45,6 +46,8 @@ if env.auth.token is None:
     raise RuntimeError(msg)
 _token = env.auth.token.get_secret_value()
 
+hide_mcp_query()
+
 mcp_app = mcp.http_app(path="/")