9858e06b73
Load an allowlisted subset of homebox-mcp tools (read + safe writes, no deletes) over stdio and compile them into a separate admin agent, so non-admins never see them. Each tool also re-checks is_admin per call. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>