Follow-up fixes landed for Alembic compatibility and the additional hardening items.

New commits:

• 0e1bb987b fix: harden alembic sqlite migration compatibility
• 1c3b0a6e7 fix: tighten llm token scoping and update rbac docs

What changed:

• Hardened multiple migrations to be idempotent and SQLite-safe on fresh upgrade chains (table/column existence guards, safe reflection, safe constraint/index ops):
  • a706a3320c56_use_argon2id_for_encryption_key.py
  • f3a3a3d901b8_remove_gateway_url_unique_constraint.py
  • 191a2def08d7_resource_rename_template_to_uri_template.py
  • n8h9i0j1k2l3_add_database_indexes.py
  • 4f07c116f917_add_indexes_for_pagination.py
  • a8f3b2c1d4e5_add_gateway_refresh_fields.py
  • 43c07ed25a24_add_oauth_fields_to_servers.py
• Tightened LLM token-scoping patterns to exact endpoint matches (optional trailing slash only):
  • mcpgateway/middleware/token_scoping.py
• Added token-scoping test cache hygiene and exact-path regression coverage:
  • tests/unit/mcpgateway/middleware/test_token_scoping.py
• Updated RBAC docs role table to include llm.read / llm.invoke role grants:
  • docs/docs/manage/rbac.md

Verification run (local):

• cd mcpgateway && alembic heads -> 9f5d93ced2b3 (head)
• rm -f /tmp/c17_sqlite_alembic.db && cd mcpgateway && DATABASE_URL=sqlite:////tmp/c17_sqlite_alembic.db alembic upgrade head
• cd mcpgateway && DATABASE_URL=sqlite:////tmp/c17_sqlite_alembic.db alembic current -> 9f5d93ced2b3 (head)
• cd mcpgateway && DATABASE_URL=sqlite:////tmp/c17_sqlite_alembic.db alembic downgrade -1 && DATABASE_URL=sqlite:////tmp/c17_sqlite_alembic.db alembic upgrade head
• uv run pytest tests/unit/mcpgateway/middleware/test_token_scoping.py -q
• uv run pytest tests/unit/mcpgateway/routers/test_llm_proxy_router.py -q
• uv run pytest tests/unit/mcpgateway/middleware/test_rbac_endpoint_coverage.py -q
• uv run pytest tests/unit/mcpgateway/services/test_rbac_permission_matrix.py -q
• make flake8

All commands above completed successfully.