v5.2.1 — annotations that tell the truth

A TDQS audit (Glama's per-tool scoring) caught two tools whose annotations denied what they actually do:

• a11y_ledger: record mutates a persistent file — readOnlyHint/idempotentHint were both wrong (scored 1/5 on Behavior). Now false/false.
• a11y_forms: it REALLY submits forms — no longer declared read-only, with an explicit usage guard in the description (test/staging or forms you own; never production forms that trigger real emails, orders or leads).

Also: all 24 tool descriptions now state their return shape ("Returns JSON: …"), and pages gains min/max constraints. No behavior changes — the wire now matches what was always true.