fix(qa): resolve A.1-A.7 code bugs and B.1-B.8 documentation issues

Code fixes:
- Rename "Coolify Admin" to "MCP Hub Admin" in endpoints
- Enrich list_projects with alias and endpoint URL
- Downgrade OAuth InvalidTokenError log from WARNING to DEBUG
- Add 7 missing health tools to /system/mcp endpoint (now 24 tools)
- Remove "Phase 7.2" from health monitor log
- Fix WP Advanced health check to pass with REST API only
- Downgrade duplicate alias warnings to INFO

Documentation fixes:
- Document SSE transport and Bearer auth requirement
- Recommend plugin-specific endpoints to save tokens
- Document plugin vs project endpoint differences
- WordPress plugin requirements for SEO/WP-CLI tools
- Docker socket mounting guide for WP-CLI
- Mark MASTER_API_KEY as recommended (auto-generates temp key)
- Env var naming convention with prefix table

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

DOCKER_README.md

@@ -56,6 +56,16 @@ In Claude Desktop's `claude_desktop_config.json`:
 }
 ```
 
+## Authentication
+
+MCP Hub uses **Bearer token** authentication. Include the `Authorization` header in all requests:
+
+```
+Authorization: Bearer YOUR_MASTER_API_KEY
+```
+
+This applies to both MCP clients and API calls. Query parameter auth is not supported.
+
 ## Using Docker Compose
 
 ```yaml
@@ -69,6 +79,8 @@ services:
     volumes:
       - mcphub-data:/app/data
       - mcphub-logs:/app/logs
+      # Optional: mount Docker socket for WP-CLI tools
+      # - /var/run/docker.sock:/var/run/docker.sock:ro
     restart: unless-stopped
 
 volumes:
@@ -76,6 +88,9 @@ volumes:
   mcphub-logs:
 ```
 
+> **WP-CLI tools** (cache flush, database export, plugin updates via CLI) require Docker socket access.
+> Add `WORDPRESS_SITE1_CONTAINER=your-wp-container-name` to your `.env` and uncomment the Docker socket volume above.
+
 ```bash
 docker compose up -d
 ```
@@ -92,7 +107,7 @@ docker compose up -d
 
 | Variable | Required | Description |
 |----------|----------|-------------|
-| `MASTER_API_KEY` | **Yes** | API key for authentication |
+| `MASTER_API_KEY` | Recommended | API key for authentication. If omitted, a temporary key is auto-generated and printed to logs |
 | `WORDPRESS_SITE1_URL` | For WP | WordPress site URL |
 | `WORDPRESS_SITE1_USERNAME` | For WP | WordPress admin username |
 | `WORDPRESS_SITE1_APP_PASSWORD` | For WP | WordPress Application Password |