fix(mcp): supply the verifying key to the MCP server

docker-compose-dev.yml

@@ -194,12 +194,16 @@ services:
       dockerfile: Dockerfile
     environment:
       - PROWLER_MCP_TRANSPORT_MODE=http
+      # The API generates this key pair on first boot; reading the public half
+      # here is what lets the MCP server verify token signatures.
+      - DJANGO_TOKEN_VERIFYING_KEY_FILE=/home/prowler/.config/prowler-api/jwt_public.pem
     env_file:
       - path: .env
         required: false
     ports:
       - "8000:8000"
     volumes:
+      - ./_data/api:/home/prowler/.config/prowler-api:ro
       - ./mcp_server/prowler_mcp_server:/app/prowler_mcp_server
       - ./mcp_server/pyproject.toml:/app/pyproject.toml
       - ./mcp_server/entrypoint.sh:/app/entrypoint.sh