Read-only MCP server and typed Python client for the comdirect banking API (photoTAN push login, OS keychain credentials)