Local-first governed MCP aggregator: one endpoint for every MCP server, with profiles, approvals, audit logs, encrypted vault, and dashboard.