Makefile MCP

Expose trusted GNU Make targets as governed MCP tools without a generic shell.