Tailscale-native MCP gateway with identity-based access control, audit logging, and session recording