feat(mcp): SSE/HTTP mode, workplan OPS-WP-0002 done

- Add --http flag to MCP server for SSE transport on port 8002
- Add make mcp-http / mcp-stop targets
- Pin fastmcp<3.1.0 to stabilize dependency
- Update session-protocol: Step 0 tunnel health check before orient
- Mark OPS-WP-0002 and all its tasks done

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.claude/rules/session-protocol.md

@@ -4,6 +4,14 @@ State Hub: http://127.0.0.1:8000
 
 ### Session Protocol
 
+**Step 0 — Tunnel health**
+
+Before anything else:
+```bash
+bridge status
+```
+Bring up any stopped or stale tunnels before accessing remote services.
+
 **Step 1 — Orient**
 
 Read the offline-safe brief first: