chore: pre-migration snapshot

Layer0, MCP servers, Terraform consolidation

MULTI_ACCOUNT_AUTH.md

@@ -91,7 +91,7 @@ Each account becomes its own MCP entry, wired to its own env vars:
 // Production Cloudflare account
 "cloudflare_prod": {
   "type": "local",
-  "command": ["npx", "-y", "@modelcontextprotocol/server-cloudflare"],
+  "command": ["python3", "-m", "mcp.cloudflare_safe"],
   "environment": {
     "CLOUDFLARE_API_TOKEN": "{env:CLOUDFLARE_API_TOKEN_PRODUCTION}",
     "CLOUDFLARE_ACCOUNT_ID": "{env:CLOUDFLARE_ACCOUNT_ID_PRODUCTION}"
@@ -102,7 +102,7 @@ Each account becomes its own MCP entry, wired to its own env vars:
 // Staging Cloudflare account
 "cloudflare_staging": {
   "type": "local",
-  "command": ["npx", "-y", "@modelcontextprotocol/server-cloudflare"],
+  "command": ["python3", "-m", "mcp.cloudflare_safe"],
   "environment": {
     "CLOUDFLARE_API_TOKEN": "{env:CLOUDFLARE_API_TOKEN_STAGING}",
     "CLOUDFLARE_ACCOUNT_ID": "{env:CLOUDFLARE_ACCOUNT_ID_STAGING}"
@@ -253,8 +253,8 @@ Cursor IDE itself uses a single account (your Cursor subscription), but Cursor A
       }
     },
     "cloudflare_prod": {
-      "command": "npx",
-      "args": ["-y", "@modelcontextprotocol/server-cloudflare"],
+      "command": "python3",
+      "args": ["-m", "mcp.cloudflare_safe"],
       "env": {
         "CLOUDFLARE_API_TOKEN": "prod_token",
         "CLOUDFLARE_ACCOUNT_ID": "prod_account_id"