safe-runbook-mcp v0.1.0

First portfolio release: policy-gated MCP tools, dry-run planning, out-of-band approvals, CLI, sample runbooks, tests, Docker, and CI.