[Bug] Cloudflare Turnstile rejects all /api/workflows/add-mcp-plugin requests (submit + claim + rescan) #14529