Exposes the M2 backend flags as a switch on the MCP provider create/edit
modal so workspace admins can opt in to enterprise SSO identity-forwarding
per provider. When the toggle flips on, the modal sends
forward_user_identity=true + identity_mode="idp_token" to the console API
(which the M2 backend persists on tool_mcp_providers).
- The toggle lives between Server Identifier and the Authentication tabs;
it overrides the static Authorization (from Auth/Headers) at invoke time.
- The form-state hook hydrates from the GET response so editing preserves
the previous choice across sessions.
- en-US + zh-Hans strings added; other locales fall back to en-US.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
