From Local Hack to Production: How We Solved the MCP Multi-Tenant Auth Problem