v0.1.0 — initial spike

Initial working spike: MCP server for governed catalog schema + content maintenance (dry-run preview, two-phase confirm with blast-radius disclosure, audit log, read-only policy mode). Attached: screen recording of the full demo run. See README.md for the write-up and demo/transcript.txt for the text transcript of the same run.