extension(vscode): drop HANZO_IAM_ env-var prefix, use canonical IAM_

Aligns the standalone MCP server's auth path with the canonical IAM_
env contract enforced by hanzo-iam 1.30.0 (python-sdk 3cb6a34) — there
is exactly one prefix, IAM_, with no upstream-brand alias chain.

- HANZO_IAM_ENDPOINT       → IAM_ENDPOINT
- HANZO_IAM_LOGIN_URL      → IAM_LOGIN_URL
- HANZO_IAM_CLIENT_ID      → IAM_CLIENT_ID
- HANZO_IAM_CLIENT_SECRET  → IAM_CLIENT_SECRET

Updates docs/BUILD.md and docs/MCP_INSTALLATION.md to match.

docs/BUILD.md

@@ -144,7 +144,7 @@ VS Code extensions are signed automatically when published to the marketplace.
 - `VSCODE_ENV`: Set to 'development' or 'production'
 - `HANZO_WORKSPACE`: Default workspace for MCP operations
 - `HANZO_ANONYMOUS`: Set to 'true' for anonymous mode
-- `HANZO_IAM_ENDPOINT`: Custom IAM endpoint (default: https://iam.hanzo.ai)
+- `IAM_ENDPOINT`: Custom IAM endpoint (default: https://iam.hanzo.ai)
 
 ## Testing Builds
 

docs/MCP_INSTALLATION.md

@@ -184,7 +184,7 @@ The extension will generate `.windsurfrules` file.
 - `HANZO_ANONYMOUS` - Set to 'true' for anonymous mode
 - `MCP_TRANSPORT` - Transport method (stdio or tcp)
 - `MCP_PORT` - Port for TCP transport (default: 3000)
-- `HANZO_IAM_ENDPOINT` - Custom IAM endpoint (default: https://iam.hanzo.ai)
+- `IAM_ENDPOINT` - Custom IAM endpoint (default: https://iam.hanzo.ai)
 
 ### Tool Configuration
 

packages/vscode/src/auth/standalone-auth.ts

@@ -39,12 +39,12 @@ export class StandaloneAuthManager {
         this.tokenFile = path.join(this.configDir, 'auth.json');
         this.deviceIdFile = path.join(this.configDir, 'device.json');
         
-        // Casdoor configuration: login UI on hanzo.id, API on iam.hanzo.ai
+        // IAM configuration: login UI on hanzo.id, API on iam.hanzo.ai
         this.casdoorConfig = {
-            endpoint: process.env.HANZO_IAM_ENDPOINT || 'https://iam.hanzo.ai',
-            loginUrl: process.env.HANZO_IAM_LOGIN_URL || 'https://hanzo.id',
-            clientId: process.env.HANZO_IAM_CLIENT_ID || 'hanzo-mcp',
-            clientSecret: process.env.HANZO_IAM_CLIENT_SECRET,
+            endpoint: process.env.IAM_ENDPOINT || 'https://iam.hanzo.ai',
+            loginUrl: process.env.IAM_LOGIN_URL || 'https://hanzo.id',
+            clientId: process.env.IAM_CLIENT_ID || 'hanzo-mcp',
+            clientSecret: process.env.IAM_CLIENT_SECRET,
             applicationName: 'hanzo-mcp',
             organizationName: 'hanzo'
         };

packages/vscode/src/mcp-server-standalone-auth.ts

@@ -37,7 +37,7 @@ Environment Variables:
   HANZO_WORKSPACE       Default workspace directory
   MCP_TRANSPORT         Transport method (stdio or tcp, default: stdio)
   MCP_PORT              Port for TCP transport (default: 3000)
-  HANZO_IAM_ENDPOINT    IAM endpoint (default: https://iam.hanzo.ai)
+  IAM_ENDPOINT          IAM endpoint (default: https://iam.hanzo.ai)
 
 Authentication:
   By default, the server requires authentication with your Hanzo account.