Context: As part of the MCP Security assessment, the recommendation is to  Validate Atlas API connection protocol from configuration if altered by user and prevent any non HTTPS endpoint communications. E.g. force HTTPS on Atlas API.

Expected behaviour:

1. MCP Server does not accept apiBaseUrl param set to non HTTPS URL with gracefull error
2. MCP Server does not accept changed apiBaseUrl after startup (
   note - this might be a no-op since user config is loaded at startup)

Estimation: 1d