One MCP server for the whole contract-ops CLI suite — connect once, drive all nine local-first CLIs as agent tools. Signing stays human-gated.