feat: add agentd MCP work context

[haasonsaas]

Summary

• add agentd_work_context, a bounded read-only MCP tool that combines device state, recent apps/windows, active artifacts, drop accounting, warnings, and agent verification guidance without returning raw frames or OCR
• add scripts/mcp_smoke.py and wire it into CI for debug and packaged app MCP smoke coverage
• emit machine-readable permission smoke evidence in dist/permission-smoke-evidence.json

Local verification

• swift test (160 tests, 0 failures)
• swift build -Xswiftc -warnings-as-errors
• python3 scripts/mock_chronicle.py --self-test Tests/Fixtures/chronicle
• python3 scripts/macos_availability_audit.py
• python3 scripts/sparkle_appcast.py self-test
• python3 scripts/validate_release_metadata.py && python3 scripts/validate_pr_title.py 'feat: add agentd MCP work context'
• xcrun swift-format lint --strict --recursive Sources Tests Package.swift && git diff --check
• python3 -m py_compile scripts/mcp_smoke.py
• python3 scripts/mcp_smoke.py
• scripts/package_app.sh
• python3 scripts/mcp_smoke.py --packaged-binary 'dist/EvalOps agentd.app/Contents/MacOS/agentd'
• AGENTD_INSTALL_APPLICATIONS=0 scripts/permission_smoke.sh --no-launch --no-install-applications plus JSON evidence validation
• codesign --verify --strict --deep --verbose=2 'dist/EvalOps agentd.app'

[cursor]

PR Summary

Medium Risk
Adds a new MCP tool and associated aggregation logic that exposes additional local activity metadata; while designed to be redacted/bounded, it expands a privacy-sensitive interface. CI now exercises both debug and packaged binaries, which could introduce new build/test flakiness.

Overview
Adds a new read-only MCP tool, agentd_work_context, that returns a freshness-stamped bundle of device snapshot + bounded recent activity/artifacts + drop accounting, along with warnings and verification guidance (without raw frames/OCR).

Introduces scripts/mcp_smoke.py to black-box test MCP JSON-RPC init, tool discovery, error shapes, redaction expectations, diagnostics artifact writing, and (in CI) both the local debug binary and the packaged app binary.

Updates scripts/permission_smoke.sh to also emit a machine-readable dist/permission-smoke-evidence.json, and refreshes README/docs and tests to reflect the new MCP tool and smoke gates.

^{Reviewed by Cursor Bugbot for commit ee3fd4c. Bugbot is set up for automated code reviews on this repo. Configure here.}