fix(microsoft-teams): rename public host to graph-mcp.decocms.com

[viktormarinho]

Summary

• Azure AD rejected https://microsoft-teams-mcp.decocms.com/oauth/callback with "Your reply url contains prohibited words or prohibited domains" — the filter blocks brand tokens like microsoft and teams in the host, and the old subdomain contained both
• Rename the MCP's public host to graph-mcp.decocms.com (references Microsoft Graph without using the trademarked word). Worker name, package name, and log service id are left as microsoft-teams-mcp since those don't affect the URL filter and renaming the worker would orphan the TEAMS_KV binding
• Updated: wrangler.toml custom-domain route, app.json connection URL, WEBHOOK_URL default in env.ts, and SERVER_PUBLIC_URL fallback in subscriptions.ts

Out-of-repo follow-up

• Add graph-mcp.decocms.com CNAME in the decocms.com Cloudflare zone (the route in wrangler.toml provisions the custom-domain binding on next wrangler deploy)
• In the Azure AD app registration: Authentication → Web → register https://graph-mcp.decocms.com/oauth/callback

Test plan

• wrangler deploy provisions the new custom domain
• Azure AD accepts https://graph-mcp.decocms.com/oauth/callback as a reply URL
• "Connect to Microsoft" OAuth flow completes end-to-end on the new host
• Re-running subscribe_to_channel produces a Graph subscription whose notificationUrl points at the new host, and a test message in that channel fires the teams.message.received trigger

🤖 Generated with Claude Code

---

Summary by cubic

Renamed the Teams MCP public host to graph-mcp.decocms.com to bypass Azure AD’s reply URL filter. Updated the connection URL, default WEBHOOK_URL, and SERVER_PUBLIC_URL fallback so OAuth and Graph subscriptions use the new domain.

• Migration
  • Add a graph-mcp.decocms.com CNAME in the decocms.com Cloudflare zone.
  • In Azure AD, add https://graph-mcp.decocms.com/oauth/callback as a reply URL.

^{Written for commit 2fbd2bd. Summary will update on new commits. Review in cubic}

[cubic-dev-ai]

No issues found across 4 files

_{Re-trigger cubic}