claude-code over NATS: licence events, a token by request, a login pushed to the manager, MCP servers registered per node or mesh-wide

Events carry what happened and no secret; tokens travel on requests (design 32 §10). The manager's
licence.rotated/switched events make the module ask anthropic-licence-manager.current; at start it
asks once to catch up. A refresh token appearing in the credentials file is a login: it is pushed to
the manager's adopt at once, sealed to the manager's key — the one time a refresh token travels. A
switch replaces the old licence's grant whole, removes the API key and its helper, and rewrites
oauthAccount in ~/.claude.json. New tools register and unregister MCP servers on this node, or with
nodes: all / a list via an mcp.registered event every node consumes; called for one node, the
answer names the other nodes running claude-code. 26 tests.

modules/claude-code/module.json

@@ -11,12 +11,26 @@
   "binds": {
     "mcp-endpoint": "${dir:state}/mcp-endpoint.json"
   },
+  "emits": [
+    "mcp.registered",
+    "mcp.unregistered"
+  ],
+  "consumes": [
+    "claude-code.mcp.registered",
+    "claude-code.mcp.unregistered",
+    "claude-licence-manager.licence.rotated",
+    "claude-licence-manager.licence.switched"
+  ],
+  "uses": [
+    "anthropic-licence-manager"
+  ],
   "tools": [
     "claude_code_status",
     "claude_code_render",
-    "claude_code_public_key",
-    "claude_code_apply",
-    "claude_code_pending_login"
+    "claude_code_pull",
+    "claude_code_mcp_list",
+    "claude_code_mcp_register",
+    "claude_code_mcp_unregister"
   ],
   "resources": [
     {