MCP server exposes build and run target tools

When the MCP server is started with --allow-run, it now advertises once_build_target and once_run_target tools. Agents can build and run targets using the same target IDs accepted by the CLI.