[pournasserian]

Closes #2516

What

The MCP-01 coverage test of F-MCP (#2423). McpCoverageTests lists the capabilities MCP-01 names with the tools that cover each one.

• Built rows: SCH (list, read, schema document, create, revise) and CHG (open, read, diff, submit, reopen).
• Expected-missing rows, each naming the epic that adds it: CNT F-CNT: Entries with versions, states and entity references #2416, ENT F-ENT: Entity registry with sources, validity and blast radius #2417, RUL F-RUL: Rule book as versioned content #2419, CHK F-CHK: Check engine with deterministic and LLM-judged checks #2420, DSK read-only review decisions F-DSK: Review desk as the home screen #2422, MED F-MED: Media library with required alt text #2427, search F-SRC: Full-text search for agents and the desk #2430, and MCP-08 bulk operations F-MCP: MCP server, agent credentials, scopes and caps #2423.
• The test resolves every IToolProvider the way the host does (AddFluentCmsCore) and fails when:
  • a built row's tool is not registered
  • a registered tool is in no row
  • a missing row names no epic
  • a tool name starts with approve, reject, publish or revert (MCP-06, SEC-02)
• CONTRIBUTING.md: a new tool adds its row in the same pull request.

Why

The epic's acceptance asks for a coverage test against the MCP-01 list that passes at the end of M1. Listing unbuilt capabilities with their epics lets it pass today and say exactly what is left. Failing on an unlisted tool keeps the list current as lanes add tools.

Choices worth a look:

• Bulk operations stay expected-missing. MCP-08 needs the jobs table from ADR-0010, which does not exist yet: JobQueueWorker only keeps its polling rhythm. It also needs change set operations on entries and entities, which the change set directory still refuses with item_kind_unavailable. Its row names F-MCP: MCP server, agent credentials, scopes and caps #2423 until both land.
• Review verbs in names: tool names start with their verb, so the check looks at the first word, and a read tool such as get_published_entry passes. A name check is coarse, but it stops the obvious mistake. The Core check from Refuse agents' review moves and enforce change set caps #2503 is what actually refuses the move.

Tests

The four checks above pass on v2. The full suite ran locally against a postgres:17 container as well as SQLite, and markdownlint passes. No new package and no new project reference.

Checklist

• Linked to an issue a maintainer has confirmed
• Targets v2
• Tests or docs updated where behaviour changed
• No tool-generated co-author trailers or footers