Permission-gated superuser (sysadmin) MCP server: lets AI agents manage a machine behind guardrails, approvals and an append-only audit log. pip install superuser