PASS MCP tools/list + tools/call: Pending / Unschedulable / FailedScheduling
PASS MCP: another Pod is denied by Kubernetes RBAC
PASS MCP: invalid Pod name is rejected
PASS RBAC rejects: list Secrets
PASS RBAC rejects: read Pod logs
PASS RBAC rejects: read another namespace
PASS RBAC rejects: patch Pod
