Connect Tools and MCP Servers

In this challenge, you give the agent tools that come from outside the workshop. You install the MCP client library, connect a server, and put its tools behind the same audit log and guards as the built-in tools.

An MCP tool added in the usual way is registered with the agent and nothing more. The audit log does not record it and the stage 5 guards do not cover it, which would undo the safety work from the stage 5 preset. You fix that by wrapping each tool.