feat(mcp): promotions for v0.6.2 (#24)

* feat(mcp): promotions for v0.6.2 with evidence & docs

- Add app/mcp-servers/promotions/ with production runtime server
- Update MCP_PROMOTION_EVIDENCE.md with app structure evidence
- Update MCP_VALIDATION.md version header to v0.6.2
- Add v0.6.2 release notes with PR tracking
- Update CHANGELOG.md with app MCP server addition

Scope: ≤300 LOC, docs/evidence included, no product logic beyond wiring

* fix(docs): add version headers to documentation files

- Move Version: v0.6.2 to first line in docs/releases/v0.6.2.md
- Move Version: v0.6.2 to first line in docs/audits/shared/MCP_PROMOTION_EVIDENCE.md
- Move Version: v0.6.2 to first line in docs/audits/shared/MCP_VALIDATION.md

Fixes docs-check CI failure

Author: haz3141

CHANGELOG.md

@@ -8,6 +8,7 @@ All notable changes to this project will be documented in this file.
 - **Coverage Gating**: Added pytest-cov with 68% threshold enforcement in CI
 - **MCP Tool Promotions**: Added docs.search and vector.search tools to allowlist
 - **Documentation Headers**: Enforced version headers on all docs/ files
+- **App MCP Server**: Created production runtime server in `app/mcp-servers/promotions/`
 
 ### Changed
 - **Lint Expansion**: Expanded Ruff rules scope with comprehensive configuration

docs/audits/shared/MCP_PROMOTION_EVIDENCE.md

@@ -2,17 +2,25 @@ Version: v0.6.2
 
 # MCP Tool Promotions — Evidence
 
-## Tools added
+## Tools promoted to app scope
 
-- docs.search
-- vector.search
+- `search_docs` - Document search functionality
+- `summarize` - Text summarization functionality
 
 ## CI Evidence
 
 - `mcp-allowlist` workflow: schema validator ✅
 - `pytest` allowlist tests: presence + denial ✅
+- Coverage gating: 68% threshold enforced ✅
+
+## App Structure Evidence
+
+- `app/mcp-servers/promotions/server.py` - Production runtime server
+- `app/mcp-servers/promotions/pyproject.toml` - Minimal runtime dependencies
+- Lab dependencies properly abstracted
 
 ## Runtime Evidence (paste after manual check)
 
-- Example `docs.search` invocation output…
-- Example denial for a non-allowlisted tool…
+- Example `search_docs` invocation output…
+- Example `summarize` invocation output…
+- Health check endpoint response…

docs/audits/shared/MCP_VALIDATION.md

@@ -1,4 +1,4 @@
-Version: v0.6.1
+Version: v0.6.2
 
 # MCP Validation Evidence
 
@@ -18,4 +18,4 @@ Version: v0.6.1
 
 - MCP server successfully running on localhost:8765
 - Guardian security policy properly enforcing tool allowlist
-- All tool calls are being blocked by security policy as expected
+- All tool calls are being blocked by security policy as expected