fix(mcp): normalize names in CLI lookup commands, guard empty names

Address follow-up review feedback:
- Add normalize_server_name() to remove_server, auth_server,
  test_server, and toggle_server CLI commands so lookups match
  the normalized name stored by add_server
- Add empty-name guard in web API extensions install handler to
  reject names like "@#$" that normalize to ""

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: zmanian

src/channels/web/handlers/extensions.rs

@@ -140,6 +140,11 @@ pub async fn extensions_install_handler(
     });
 
     let normalized_name = crate::tools::mcp::config::normalize_server_name(&req.name);
+    if normalized_name.is_empty() {
+        return Ok(Json(ActionResponse::fail(
+            "Server name contains no valid characters".to_string(),
+        )));
+    }
     match ext_mgr
         .install(
             &normalized_name,

src/cli/mcp.rs

@@ -300,6 +300,7 @@ async fn add_server(args: McpAddArgs) -> anyhow::Result<()> {
 
 /// Remove an MCP server.
 async fn remove_server(name: String) -> anyhow::Result<()> {
+    let name = normalize_server_name(&name);
     let (db, owner_id) = connect_db().await;
     let mut servers = load_servers(db.as_deref(), &owner_id).await?;
     if !servers.remove(&name) {
@@ -421,6 +422,7 @@ async fn list_servers(verbose: bool) -> anyhow::Result<()> {
 
 /// Authenticate with an MCP server.
 async fn auth_server(name: String, user_id: String) -> anyhow::Result<()> {
+    let name = normalize_server_name(&name);
     // Get server config
     let (db, owner_id) = connect_db().await;
     let servers = load_servers(db.as_deref(), &owner_id).await?;
@@ -505,6 +507,7 @@ async fn auth_server(name: String, user_id: String) -> anyhow::Result<()> {
 
 /// Test connection to an MCP server.
 async fn test_server(name: String, user_id: String) -> anyhow::Result<()> {
+    let name = normalize_server_name(&name);
     // Get server config
     let (db, owner_id) = connect_db().await;
     let servers = load_servers(db.as_deref(), &owner_id).await?;
@@ -630,6 +633,7 @@ async fn test_server(name: String, user_id: String) -> anyhow::Result<()> {
 
 /// Toggle server enabled/disabled state.
 async fn toggle_server(name: String, enable: bool, disable: bool) -> anyhow::Result<()> {
+    let name = normalize_server_name(&name);
     let (db, owner_id) = connect_db().await;
     let mut servers = load_servers(db.as_deref(), &owner_id).await?;