Safety-first Git MCP server: 22 read-only tools designed for agent context budgets; writes are proposals approved by a human in the FluxGit desktop app.