MCP 0.7.30: qualified external operator inputs

Expose explicit, bounded external operator inputs between application actions. Backend records these separately from app execution. Requester inputs remain unchanged; arbitrary provider writes remain refused. npm artifact verified against the tested build.