P5: MCP server skeleton wrapping core-api

Imported from GitHub issue El-SaMa/oma#63 by @El-SaMa.

Expose tools that call the trusted core API, never the DB/providers directly.