Capability sources, add default source under wf.

tests/wf_mcp/test_names.py

@@ -1,6 +1,7 @@
 from __future__ import annotations
 
 from wf_mcp.shared.names import (
+    ADMIN_NAMESPACE,
     is_admin_tool_name,
     namespaced_tool_name,
     parse_namespaced_tool_name,
@@ -23,5 +24,11 @@ def test_namespaced_tool_names_are_reversible_with_known_connections() -> None:
 
 def test_namespaced_tool_parser_rejects_unknown_and_admin_names() -> None:
     assert parse_namespaced_tool_name("missing_echo", {"everything.default"}) is None
-    assert is_admin_tool_name("wf.mcp_list_connections") is True
+    assert is_admin_tool_name("wf.admin.list_connections") is True
     assert is_admin_tool_name("everything.default_echo") is False
+
+
+def test_admin_namespace_is_distinct_from_wf_mcp_runtime_source() -> None:
+    assert ADMIN_NAMESPACE == "wf.admin"
+    assert is_admin_tool_name("wf.admin.list_connections") is True
+    assert is_admin_tool_name("wf.mcp.call_tool") is False