Context7 MCP server missing API key auth — all requests hit anonymous rate limit when using PLAN

[mattsilv]

The plugin's plugin.json defines the Context7 MCP server with no authentication:

"mcpServers": {
  "context7": {
    "type": "http",
    "url": "https://mcp.context7.com/mcp"
  }
}

This means every Context7 request goes unauthenticated, immediately hitting the anonymous rate limit ("Monthly quota exceeded") regardless of the user's actual account status.

Workaround: Manually inject API key header into the plugin cache file — works but gets overwritten on updates.

Suggested fix: Add header support, either:

1. Env var expansion: "CONTEXT7_API_KEY": "${CONTEXT7_API_KEY}"
2. Switch to /mcp/oauth endpoint for browser-based auth

Related: upstash/context7#1713