test(runtime): the new /mcp unit pins read the dispatcher result through a non-null assertion

`res.response` is optional on HttpDispatcherResult, so the nine new reads
grew the file's test-typecheck debt (TS18048). The pre-existing reads in the
file keep their ledgered spelling.

Claude-Session: https://claude.ai/code/session_01SYEJqDL3NXxrJRBVqaMu9T
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/runtime/src/http-dispatcher.mcp.test.ts

@@ -206,43 +206,43 @@ describe('HttpDispatcher.handleMcp', () => {
       const { kernel } = makeKernel({ withMcp: true });
       const d = new HttpDispatcher(kernel, undefined, { enforceProjectMembership: false });
       const res = await d.handleMcp({}, makeContext({ executionContext: undefined }));
-      expect(res.response.status).toBe(401);
-      expect(res.response.body.error.code).toBe('UNAUTHENTICATED');
+      expect(res.response!.status).toBe(401);
+      expect(res.response!.body.error.code).toBe('UNAUTHENTICATED');
     });
 
     it('anonymous → 401 UNAUTHENTICATED with no mcp service, not 501', async () => {
       process.env.OS_MCP_SERVER_ENABLED = 'true';
       const { kernel } = makeKernel({ withMcp: false });
       const d = new HttpDispatcher(kernel, undefined, { enforceProjectMembership: false });
       const res = await d.handleMcp({}, makeContext({ executionContext: undefined }));
-      expect(res.response.status).toBe(401);
-      expect(res.response.body.error.code).toBe('UNAUTHENTICATED');
+      expect(res.response!.status).toBe(401);
+      expect(res.response!.body.error.code).toBe('UNAUTHENTICATED');
     });
 
     it('a system principal is still admitted: the switch-off 404 answers it', async () => {
       process.env.OS_MCP_SERVER_ENABLED = 'false';
       const { kernel } = makeKernel({ withMcp: true });
       const d = new HttpDispatcher(kernel, undefined, { enforceProjectMembership: false });
       const res = await d.handleMcp({}, makeContext({ executionContext: SYSTEM }));
-      expect(res.response.status).toBe(404);
-      expect(res.response.body.error.code).toBe('RESOURCE_NOT_FOUND');
+      expect(res.response!.status).toBe(404);
+      expect(res.response!.body.error.code).toBe('RESOURCE_NOT_FOUND');
     });
 
     it('a system principal is still admitted: the no-service 501 answers it', async () => {
       process.env.OS_MCP_SERVER_ENABLED = 'true';
       const { kernel } = makeKernel({ withMcp: false });
       const d = new HttpDispatcher(kernel, undefined, { enforceProjectMembership: false });
       const res = await d.handleMcp({}, makeContext({ executionContext: SYSTEM }));
-      expect(res.response.status).toBe(501);
-      expect(res.response.body.error.code).toBe('NOT_IMPLEMENTED');
+      expect(res.response!.status).toBe(501);
+      expect(res.response!.body.error.code).toBe('NOT_IMPLEMENTED');
     });
 
     it('a system principal is still admitted: MCP on and installed reaches the transport', async () => {
       process.env.OS_MCP_SERVER_ENABLED = 'true';
       const { kernel, mcpService } = makeKernel({ withMcp: true });
       const d = new HttpDispatcher(kernel, undefined, { enforceProjectMembership: false });
       const res = await d.handleMcp({ jsonrpc: '2.0', id: 1, method: 'tools/list' }, makeContext({ executionContext: SYSTEM }));
-      expect(res.response.status).toBe(200);
+      expect(res.response!.status).toBe(200);
       expect(mcpService.lastOpts).toBeDefined();
     });
   });