feat: consolidate 26 tools into 10 tools with 90 actions

Refactor the entire tool layer to use the consolidated action pattern
(action: Literal[...] with QUERIES/MUTATIONS dicts). This reduces LLM
context from ~12k to ~5k tokens while adding ~60 new API capabilities.

New tools: unraid_info (19 actions), unraid_array (12), unraid_notifications (9),
unraid_users (8), unraid_keys (5). Rewritten: unraid_docker (15), unraid_vm (9),
unraid_storage (6), unraid_rclone (4), unraid_health (3).

Includes 129 tests across 10 test files, code review fixes for 16 issues
(severity ordering, PrefixedID regex, sensitive var redaction, etc.).

Removes tools/system.py (replaced by tools/info.py). Version bumped to 0.2.0.

unraid_mcp/subscriptions/diagnostics.py

@@ -57,10 +57,14 @@ def register_diagnostic_tools(mcp: FastMCP) -> None:
                 ping_timeout=10
             ) as websocket:
 
-                # Send connection init
+                # Send connection init (using standard X-API-Key format)
                 await websocket.send(json.dumps({
                     "type": "connection_init",
-                    "payload": {"Authorization": f"Bearer {UNRAID_API_KEY}"}
+                    "payload": {
+                        "headers": {
+                            "X-API-Key": UNRAID_API_KEY
+                        }
+                    }
                 }))
 
                 # Wait for ack

unraid_mcp/subscriptions/manager.py

@@ -15,7 +15,7 @@ import websockets
 from websockets.legacy.protocol import Subprotocol
 
 from ..config.logging import logger
-from ..config.settings import UNRAID_API_KEY, UNRAID_API_URL
+from ..config.settings import UNRAID_API_KEY, UNRAID_API_URL, UNRAID_VERIFY_SSL
 from ..core.types import SubscriptionData
 
 
@@ -162,7 +162,8 @@ class SubscriptionManager:
                     subprotocols=[Subprotocol("graphql-transport-ws"), Subprotocol("graphql-ws")],
                     ping_interval=20,
                     ping_timeout=10,
-                    close_timeout=10
+                    close_timeout=10,
+                    ssl=UNRAID_VERIFY_SSL
                 ) as websocket:
 
                     selected_proto = websocket.subprotocol or "none"
@@ -180,15 +181,10 @@ class SubscriptionManager:
 
                     if UNRAID_API_KEY:
                         logger.debug(f"[AUTH:{subscription_name}] Adding authentication payload")
+                        # Use standard X-API-Key header format (matching HTTP client)
                         auth_payload = {
-                            "X-API-Key": UNRAID_API_KEY,
-                            "x-api-key": UNRAID_API_KEY,
-                            "authorization": f"Bearer {UNRAID_API_KEY}",
-                            "Authorization": f"Bearer {UNRAID_API_KEY}",
                             "headers": {
-                                "X-API-Key": UNRAID_API_KEY,
-                                "x-api-key": UNRAID_API_KEY,
-                                "Authorization": f"Bearer {UNRAID_API_KEY}"
+                                "X-API-Key": UNRAID_API_KEY
                             }
                         }
                         init_payload["payload"] = auth_payload