A test pins MCP `app_deploy`: a writer redeploys or stops an environment, anything else is refused #7150

src/http/mcp/tools/app_deploy.ts refuses invalid_action, and no test names it. Each case calls the tool through /mcp with a real token, as test/mcp.test.ts does.

Done:

• [ ] A new test with an apps runtime stub: a writer's redeploy on production answers { queued, run }, and stop on a pull-N preview answers { stopped }.
• [ ] action: "restart" is invalid_action. A reader is refused. An env that is neither production nor pull-N is refused.
• [ ] After each refusal, no run was queued.

Files: test/mcp-app-deploy.test.ts

If the test finds the behaviour wrong, fix the tool in the same pull and say so. If the check fails in a test this pull does not touch, name it in the pull rather than widening the change.

Before pushing: bun x tsc --noEmit and the new test.