Signedrun

Tamper-evident logging for MCP tool calls.