fix: sanitize MCP tool names for OpenAI API compliance

Tool names with invalid characters (slashes, dots) from server paths
were causing OpenAI API 400 errors. Added sanitization to ensure
names match required pattern ^[a-zA-Z0-9_-]{1,64}$.

Fixes #1143