Sends bearer tokens to discovery endpoints

[joberdick]

Inspector Version

• v0.20.0

Describe the bug
When MCP server returns 401 for expired token, the client unnecessarily sends the bearer token to all discovery and metadata endpoints when trying to re-establish auth. In Istio if you send a bad token it will get denied even if you allow anonymous to those endpoints.

To Reproduce

1. Connect and authenticate to an MCP server
2. Let auth token expire
3. Make a request to the MCP server.
4. After the server responds with 401, observer that the expired bearer token is still used to discovery and metadata endpoints.

Expected behavior
Bearer tokens should not be sent to discovery or metadata endpoints that are intended for pre-auth.

• OS: [e.g. iOS]
• Chrome 144.0.7559.133