refactor: split wrapToolHandler and initializeCsrf to improve code health\n\n- Extract parseHandlerArgs, isScopeAllowed, maxToolCallsReached, incrementCounter, and runSafeExecution helpers in destination-mode.ts\n- Extract buildSessionHeaders and deleteSecuritySession private methods in SessionManager to reduce initializeCsrf nesting\n- Keep abort cleanup behavior unchanged (DELETE session without clearing shared state) view more