Permission model change for automation.
- Adding, editing, and deleting individual records (the database tool) and the n3fjp_call escape hatch are now ordinary Needs-Approval writes, the same tier as logging, so they can be set to Always Allow in the client for hands-off automation. The in-band confirm argument was removed.
- The only hard-blocked class is now a whole-database wipe/overwrite (DROP/TRUNCATE or an unscoped DELETE/UPDATE), still gated by the off-by-default N3FJP_ALLOW_DB_WIPE switch.
Install: download contest-mcp.mcpb below, or pip install --upgrade contest-mcp.