feat: Add hard refresh button and fix webmcp token URL

- Add refresh button to header bar for hard page reload
- Fix duplicate /api prefix in webmcp token endpoint

frontend/src/services/webmcp.ts

@@ -223,7 +223,7 @@ export function isToolRegistered(name: string): boolean {
 // Token polling functions
 export async function checkForToken(): Promise<string | null> {
   try {
-    const res = await fetch(`${API_BASE}/api/webmcp-token`)
+    const res = await fetch(`${API_BASE}/webmcp-token`)
     const data = await res.json()
     return data.token || null
   } catch (e) {
@@ -233,7 +233,7 @@ export async function checkForToken(): Promise<string | null> {
 
 export async function clearToken(): Promise<void> {
   try {
-    await fetch(`${API_BASE}/api/webmcp-token`, { method: 'DELETE' })
+    await fetch(`${API_BASE}/webmcp-token`, { method: 'DELETE' })
   } catch (e) {
     // ignore
   }