Agents can't skip steps: an MCP server that runs gated, API-only stepfiles on the client's own model.