The MCP tells the truth about itself: probe reads, the guide lists all ten tools, probe and stop have tests #333

docs/MCP.md lists eight tools; src/http/mcp.ts serves ten (audit and probe are missing from the guide). probe is marked as writing (readOnlyHint false) but only reads. test/mcp.test.ts covers neither probe nor stop.

Acceptance:

• [ ] docs/MCP.md documents audit and probe in the same table and voice as the rest
• [ ] probe carries readOnlyHint true and still requires the access the page requires
• [ ] tests for probe (a repo the token may read; one it may not) and stop (a run id from now; a stale id)

Files: docs/MCP.md, src/http/mcp.ts, test/mcp.test.ts. One run.