GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
UpdateObservedGeneration should be the last handler that runs on such an object to ensure
that updating of the observed generation only happens if no error occurs.