mcp: add authorize log fields (#1889)

Author: wasaga

content/docs/reference/authorize-log-fields.mdx

@@ -111,6 +111,9 @@ The table below lists all available authorize log fields:
 | `impersonate-session-id` | If [impersonating](/docs/capabilities/impersonation), the impersonated session ID | Yes |
 | `impersonate-user-id` | If [impersonating](/docs/capabilities/impersonation), the impersonated user ID | Yes |
 | `ip` | The IP address of the direct downstream client. If Pomerium is deployed behind a load balancer or other proxy, this will not be the IP address of the end user. | Yes |
+| `mcp-method` | The MCP method being called (e.g., `tools/call`, `tools/list`) | No |
+| `mcp-tool` | The MCP tool name for `tools/call` requests | No |
+| `mcp-tool-parameters` | The tool call parameters as a JSON object for `tools/call` requests | No |
 | `method` | The HTTP request method, such as `GET`, `POST`, or `PUT` | Yes |
 | `path` | The HTTP request path (for example, `/some/path`) | Yes |
 | `query` | The HTTP request query (for example, `?test=one&other=13`) | No |