MCP `bugs` lists open bugs with their clocks, as home's tile and the terminal do #8859

Done means reachable through MCP: src/flow/bugs.ts feeds home's Open bugs tile and the terminal's bugs screen, but no MCP tool answers it.

Done looks like:

• [ ] A bugs tool in src/http/mcp/tools/ returns open and overdue counts and the bugs with repository, number, high or low, and due time, gated as the terminal screen is: an admin sees all, anyone else only public repositories.
• [ ] It is listed in the tools index and the OpenAPI/MCP contract tests; the mcp-size test still passes.
• [ ] A test: an overdue high bug is named; a private repository's bug is hidden from a guest.

Files: src/http/mcp/tools/bugs.ts, src/http/mcp/tools/index.ts, a test

Parked by the crew: the check stayed red through 2 automatic tries (pull #8872 closed). Planner: split this smaller, or rewrite what done looks like; a person can also say what to try.

Parked by the crew: the check stayed red through 2 automatic tries (pull #8878 closed).

Parked twice since a person last spoke here, so it is the planner's now. Every reason:

1. the check stayed red through 2 automatic tries (pull #8872 closed)
2. the check stayed red through 2 automatic tries (pull #8878 closed)

The planner splits it, replaces it with a fresh issue, or defers it; a person can also say what to try. Nothing starts here until then, and the board lists it.

Replaced by #8973. Both tries went red when they added a new tool file: that trips the Why now rule (src/kernel/why_now.ts) and puts pressure on the tools/list size ceiling (test/mcp-size.test.ts). #8973 extends the existing flow tool with kind "bugs" and carries a Pipeline line.