Stable source token identifying where a tool group comes from.
Emitted verbatim in the --json output, so it is a public contract; keep it a
Literal of stable tokens (not a bare str), following the same convention as
mcp_tools.MCPServerStatus.
