feat(mcp): 新增 integration.context.get 身份与能力自检工具 (REQ-20260911-0012)

- 实时取 AkAuthFilter 鉴权上下文（ThreadLocal AuthContext）+ ToolGuard 同源能力计算，不缓存权限
- tenant_id 映射启用作用域编码；principal_type 集中在 IntegrationContextService.resolvePrincipalType
  判定（当前按 token 绑定用户推导 user_delegated，5629 给 agent_api_key 加 principal_type 列后仅改该方法）
- data_scope_version = token_scope 绑定集合最大 modify_time 的 epoch 毫秒，无状态计算
- capability_levels 数据驱动：能力集合含 *.changes.list 工具即具备 SYNC，当前返回 QUERY
- seed-dev.sql operation 作用域白名单加入该工具

xiaoqu-agent-service/sql/seed-dev.sql

@@ -16,10 +16,10 @@ WHERE NOT EXISTS (SELECT 1 FROM agent_scope WHERE code = 'operation');
 
 -- 作用域-工具：sys.ping / agent.count / agent.list.query / property.list.query / agent.detail.query / property.detail.query
 --             / mall.order.list.query / mall.order.detail.query / mall.order.logistics.query
---             / contract.list.query / contract.detail.query
+--             / contract.list.query / contract.detail.query / integration.context.get
 INSERT INTO scope_tool (scope_id, tool_id, create_id)
 SELECT s.id, t.id, 0 FROM agent_scope s JOIN tool t
-WHERE s.code = 'operation' AND t.name IN ('sys.ping', 'agent.count', 'agent.list.query', 'property.list.query', 'agent.detail.query', 'property.detail.query', 'mall.order.list.query', 'mall.order.detail.query', 'mall.order.logistics.query', 'contract.list.query', 'contract.detail.query')
+WHERE s.code = 'operation' AND t.name IN ('sys.ping', 'agent.count', 'agent.list.query', 'property.list.query', 'agent.detail.query', 'property.detail.query', 'mall.order.list.query', 'mall.order.detail.query', 'mall.order.logistics.query', 'contract.list.query', 'contract.detail.query', 'integration.context.get')
   AND NOT EXISTS (SELECT 1 FROM scope_tool st WHERE st.scope_id = s.id AND st.tool_id = t.id);
 
 -- 作用域：hardware（出纸机查询）