Function is_valid_progress_token 

pub fn is_valid_progress_token(value: &Value) -> bool

MCP progress tokens are constrained to strings or numbers (no nulls, objects, arrays, or booleans). Validate at the boundary so we never echo a malformed token back to the client.