fix: preserve MCP placeholder in CI check

Use a quoted heredoc for the hosted endpoint assertion so GitHub Actions validates the literal LEADMAGIC_API_KEY placeholder instead of expanding it in the shell.

Made-with: Cursor

Author: jesseoue

.github/workflows/validate-plugin.yml

@@ -43,7 +43,19 @@ jobs:
 
       - name: Check hosted MCP endpoint
         run: |
-          node -e "const fs=require('node:fs');const data=JSON.parse(fs.readFileSync('mcp.json','utf8'));const server=data.mcpServers?.leadmagic;if(!server||server.type!=='http'||server.url!=='https://mcp.leadmagic.io/mcp'){throw new Error('mcp.json must point to the hosted LeadMagic MCP endpoint with explicit HTTP transport')}if(!server.headers||server.headers['x-leadmagic-key']!=='${LEADMAGIC_API_KEY}'){throw new Error('mcp.json must use LEADMAGIC_API_KEY interpolation')}"
+          node <<'EOF'
+          const fs = require('node:fs');
+          const data = JSON.parse(fs.readFileSync('mcp.json', 'utf8'));
+          const server = data.mcpServers?.leadmagic;
+
+          if (!server || server.type !== 'http' || server.url !== 'https://mcp.leadmagic.io/mcp') {
+            throw new Error('mcp.json must point to the hosted LeadMagic MCP endpoint with explicit HTTP transport');
+          }
+
+          if (!server.headers || server.headers['x-leadmagic-key'] !== '${LEADMAGIC_API_KEY}') {
+            throw new Error('mcp.json must use LEADMAGIC_API_KEY interpolation');
+          }
+          EOF
 
       - name: Check README references
         run: |