exposeHeaders property
Response headers a browser is allowed to read.
Without this a browser hides every non-simple response header, including
mcp-session-id — the client would negotiate a session it can never see
and every subsequent request would arrive unsessioned.
Implementation
final String exposeHeaders;