refactor: move mcp auth record ownership

src/wf_mcp/workflow_surface/next_actions.py

@@ -4,7 +4,7 @@ New code should import from `wf_api.next_actions`. This module stays so older
 MCP workflow-surface imports keep working during extraction.
 """
 
-from wf_api.next_actions import NextActionPatchExample, NextActionTool, NextActions
+from wf_api.next_actions import NextActionPatchExample, NextActions, NextActionTool
 
 __all__ = [
     "NextActionPatchExample",

src/wf_mcp/workflow_surface/tools.py

@@ -5,11 +5,12 @@ from typing import Annotated, Any, Mapping
 from fastmcp import FastMCP
 from pydantic import Field
 
+from wf_api import WorkflowApi
 from wf_artifacts import ArtifactKind
 from wf_artifacts.models import RequiredCapability
-from wf_api import WorkflowApi
 from wf_mcp.broker.service import WfMcpService
 from wf_mcp.broker.service.workflow_operation_context import context_from_service
+
 from .models import (
     CallCapabilityResult,
     CreateArtifactFromWorkspaceRequest,