Tracekit MCP gateway

MCP gateway you deploy: a Tracekit signer decides and signs each call; agents send each run's token.