Ensure mcp_service.sh start --enable-ingest actually writes OBSIDIAN_MCP_ENABLE_INGEST=1 by forwarding the parsed flag to start_service.
Also stop the new-token command from referencing the start-only flag, and cover both CLI paths with regression tests.
Validation: python3 -m unittest discover -v; git diff --check