fix(awooop): enable awoooi mcp gateway shadow

apps/api/migrations/awooop_awoooi_mcp_gateway_project_shadow_2026-05-13.sql

@@ -0,0 +1,25 @@
+-- =============================================================================
+-- AwoooP / AWOOOI MCP Gateway Shadow Onboarding
+-- 2026-05-13 Codex + ogt
+--
+-- 背景：
+--   AWOOOI 已完成 read-only MCP tool registry / grants seed，但 project 本身仍停在
+--   legacy_awoooi_default，會被 MCP Gateway Gate 1 正確攔截。
+--
+-- 邊界：
+--   只把 AWOOOI 租戶升到 shadow，讓既有 Gate 1 生效。
+--   write/admin tool 仍未授權；自動修復/破壞性動作不因本 migration 開放。
+-- =============================================================================
+
+BEGIN;
+
+SELECT set_config('app.project_id', 'awoooi', FALSE);
+
+UPDATE awooop_projects
+SET
+    migration_mode = 'shadow',
+    updated_at = NOW()
+WHERE project_id = 'awoooi'
+  AND migration_mode = 'legacy_awoooi_default';
+
+COMMIT;

apps/api/migrations/awooop_awoooi_mcp_gateway_project_shadow_2026-05-13_down.sql

@@ -0,0 +1,20 @@
+-- =============================================================================
+-- Rollback: AwoooP / AWOOOI MCP Gateway Shadow Onboarding
+-- 2026-05-13 Codex + ogt
+--
+-- 只回退仍停在 shadow 的 AWOOOI；若已由人工/後續 migration 推進到 canary/active，
+-- 不自動降級。
+-- =============================================================================
+
+BEGIN;
+
+SELECT set_config('app.project_id', 'awoooi', FALSE);
+
+UPDATE awooop_projects
+SET
+    migration_mode = 'legacy_awoooi_default',
+    updated_at = NOW()
+WHERE project_id = 'awoooi'
+  AND migration_mode = 'shadow';
+
+COMMIT;