"""MCP server — exposes perfxpert.tools READ_ONLY subset to external clients.

Execution-class tools are NEVER registered (see §5.8 and test_mcp_exposure.py).
"""