Serve UCP endpoints over HTTPS
A declared service endpoint uses http:// instead of https://.
Why it matters
Agents reject non-HTTPS endpoints outright. Any signed payload over HTTP is meaningless because the channel itself is tamperable.
Show fix
"endpoint": "https://yourstore.com/api/ucp/mcp"
