simplify Athena runtime and centralize MCP management

platform/mcphub/casaderoll-entrypoint.sh

@@ -18,4 +18,13 @@ fi
 JWT_SECRET=$(cat "$jwt_file")
 export JWT_SECRET
 
+# Reconcile the persistent MCPHub state with the versioned registry on every
+# start. Existing users, bearer tokens and per-server enabled flags survive.
+# This makes image upgrades reproducible instead of relying on manual edits in
+# MCPHub's database/UI.
+settings_file="$state_dir/mcp_settings.json"
+python3 /opt/casaderoll/configure-settings.py \
+  "$settings_file" /run/secrets/mcphub \
+  --registry /opt/casaderoll/config/mcp-registry.json
+
 exec "$@"