machine-bridge-mcp v0.16.1

Fixed

• Fix machine-mcp startup after 0.16.0 by keeping normalized policy capabilities immutable while allowing the sealed CLI-owned state record to update persistence metadata.
• Add regression coverage proving updatedAt remains writable without permitting capability fields or undeclared fields to be mutated.