feat(mcp): add appduct_list_events MCP tool (#125)

[V3RON]

Closes #125

Stacked on #143 (issue #124): base is that branch, not main. Part of #95.

What changed

Agents get an appduct_list_events MCP tool that lists the events an app declared, with descriptions, and the payload schema when name is an exact name. Docs: shipped skill, both READMEs, website, docs/ARCHITECTURE.md.

Acceptance criteria

#	Criterion	Test	Tier
1	Signature lines with descriptions and total	mcp-server.test.ts "returns one signature line with its description per declared event..."	unit
2	name: "cart.*" returns only matching events	"a glob name returns only the matching events..."	unit
3	Exact name also returns payload_schema	"an exact name that matches one declared event also returns its payload schema"	unit
4	No declared events: empty list, total: 0	"a session with no declared events returns an empty list..."	unit
5	Skill says to list events before waiting and names appduct events ls	skills/appduct/SKILL.md, references/cli.md (already listed events ls from #124)	docs

E2E evidence

Target: iOS simulator (iPhone 16 Pro, iOS 26.4), Expo playground, commit 53d4a1d. Branch daemon with isolated APPDUCT_STATE_DIR and OS-assigned wssPort (wssPort: 0).
Smoke: SMOKE_OK (throwing_tool: exit 72, type tool_execution_error)
Feature: appduct_list_events through appduct mcp (stdio MCP client) against the live session; no SDK declares events yet.

listed: true
{}                    -> {"session":"iphone","total":0,"limit":50,"events":[]}
{"name":"cart.*"}     -> {"session":"iphone","total":0,"limit":50,"events":[]}
{"name":"cart.added"} -> {"session":"iphone","total":0,"limit":50,"events":[]}
{"limit":5,"offset":0}-> {"session":"iphone","total":0,"limit":5,"events":[]}
{"name":"x","bogus":1}-> isError: invalid_request: appduct_list_events does not take "bogus". It takes: selector, name, limit, offset.

Checklist

• CHANGELOG.md has an entry under Unreleased (writing-changelog skill), or the change is not user-visible
• User-facing docs updated for every surface the change touches (writing-user-docs skill), or the change is not user-visible
• No new import past a module's index.ts; no new direct node:* I/O outside an adapter
• Simplification checklist from the architecture skill applied, exceptions explained above
• docs/ARCHITECTURE.md updated if a surface it describes changed

Out of scope

policy-and-audit.integration.test.ts "a prompt tool call from the CLI (no consent channel)..." failed once in the full run and passed on rerun, untouched by this change; no issue filed yet.

Status

Implement: done (5/5 green) Review: round 1, approve (2 nits fixed) E2E: pass (iOS) Ready: yes

[V3RON]

Approve (posted as a comment; GitHub blocks approving your own PR): 0 blocker, 0 should-fix, 2 nits (both docs).
Spec: issue #125 and the #95 design comment (slice 2).
Fix first: the extra appduct events ls cell in the website's two-column table, which GFM drops.

[V3RON]

nit: this table has two columns (Tool | What it does), so the third cell appduct events ls is dropped when the page renders and readers never see the CLI equivalent. Fold it into the description, e.g. "... Call it before waiting on an event. CLI: appduct events ls."

[V3RON]

nit: the paragraph above still opens with "Four more built-in tools", but it now covers two connection tools plus "the other three" here, five in all. Change "Four" to "Five" on line 226.