feat(runtime): harden local MCP and Cook workflows

[jtevesnz-sys]

Summary

• Pin Browser MCP, Chrome, and LSP runtime dependencies for repeatable local execution.
• Constrain local MCP inventory/tool routing and show only proven runtime context budgets.
• Add approval-gated Odysseus Cook task contracts with hash and receipt coverage.

Verification

• python -m pytest -q tests/test_builtin_mcp_npx_cache.py tests/test_docker_devops_hardening.py tests/test_model_context.py tests/cli/test_mcp_cli_update.py tests/test_mcp_dependency_pin.py tests/test_mcp_inventory_routing.py tests/test_misfenced_known_tools.py tests/test_runtime_context_indicator.py tests/test_cook_ops_contracts.py tests/test_cook_ops_file_flow.py
• Result: 88 passed, 3 existing environment warnings.
• git diff --check and Python compilation passed.

Review notes

• The Cook approval gate now blocks both copy/move and PowerShell execution until the contract is approved.
• Branch was rebuilt from current origin/main; conflict resolutions preserved current upstream behavior and the runtime changes.

[github-actions]

⚠️ PR description — action needed

The following required sections are missing or incomplete. Please update the PR description to address them:

• Linked Issue — add a reference like Fixes #NNN, a bare #NNN, or a link to the issue.
• Type of Change — check at least one box.
• Checklist — check the duplicate-search box to confirm you searched existing issues and PRs.
• How to Test — explain how a reviewer can verify this change. Numbered steps, the commands you ran, or a short code block all work — give a sentence or two of real detail (not just "tested locally").

---

This comment is deleted automatically once all sections are complete.