Design for an MCP gateway control plane so multiple agent harnesses
share one enforced read-only policy against the Qonto API, instead of
each client trusting its own local tool allow-list. Follows up on
BINKY-WP-0005.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>