Tenant Qonto bank API front door for binky-control read-only MCP; stays draft until policy apply, founder provision, and capabilities-safe verify.