feat(hosted): activate final modern MCP release lock

[dajiaohuang]

Summary

• activate sagasmith.release-lock/v3 and sagasmith.authoritative-mcp/v2 with the final coordinated Agent/Core/D&D/CoC/Narrative/org-docs/site revisions
• switch Hosted Web and Agent supervisor defaults atomically to the MCP 2026-07-28 modern boundary, with request-scoped delegation, exact audiences, and no sessionScoped or tools/list_changed dependency
• enforce a deterministic, authorization-scoped Host projection of at most 16 tools and retain player requester / Agent acting-host identity separately in audited v2 receipts
• upgrade the Web MCP SDK lock to 2.1.1, enable Tasks timeout configuration, and update the real container acceptance path and recovery configuration

Final component pins

• Agent 966fcba0b89b668f55b878e09c623ea3c9d2f698
• Core eef98fcfcaa96d08c069708b33ee7717ba1625c3
• D&D 587f66e0673b686a7d47d1ee266d8404ef221741
• CoC 515f6a7e3ba3c2a41fff7de2624ee19e4deb6190
• Narrative 3f3694401dace148684f7fab9adda5b12679dfa0
• Organization docs 6ee83e94efda617c1e0f36d370f87150a4e0c7d5
• Site a737915ddd8fa3a479b584f0609b19cf9b880b8e

Validation

• uv run pytest -q (full suite)
• uv run ruff check src tests scripts
• node --test tests/web/*.test.mjs (17/17)
• base and E2E docker compose ... config --quiet
• final Agent Optimize combat rendering and tactical grids #32 Config.model_validate_json against all three owned Web Agent configs
• audit_components.py --remote --scope build --strict --json (5/5 exact pins, 0 drift)
• focused modern identity/catalog, component-lock, supervisor, HTTP lifecycle, and recovery suites

Container E2E remains a required CI gate and builds the exact pinned stack before validating modern discover/catalog behavior and v2 player-requester / hosted-Agent acting-host receipts.