- Add a private helper that performs an authenticated, read-only GET for the
configured opax-mcp Cloud Run v2 service.
- Return only generation, observedGeneration, and updateTime on success, with
sanitized reason codes for token, HTTP, network, timeout, and parsing errors.
- Add mocked unit coverage for successful responses and handled failure paths.
