[ ] An MCP tool and a src/tty.ts command each mint (the secret is shown once), list and revoke proposal tokens. Both call the same action the page uses (src/actions/proposals.ts), with no second copy of the rules.
[ ] Writer-only on both doors. A non-writer is refused with the same words as the API.
[ ] Tests: per door, the mint, list and revoke round trip and the non-writer refusal.
Split from #2088. This waits for #1831.
Done looks like:
Brief: scout.