[0.6] MCP tool-level scopes + scope attenuation

[Raulgooo]

Release

0.6 — Real MCP

Objective

Scope policies for MCP tools.

Problem

• No fine-grained tool scoping
• All tools share same access level

Fix

1. mcp_tool_scopes table: (tool_id, scope, required_capability)
2. Admin UI to configure tool scopes
3. Enforce at MCP auth layer
4. Scope attenuation per delegation hop

Files

• internal/storage/sqlite.go
• internal/mcp/scopes.go
• admin/src/components/mcp_tools.tsx (new)

Acceptance Criteria

• Tool scopes configurable
• Enforced at auth layer
• Scope attenuation per hop
• Admin UI
• Tests for scope enforcement