feat: AX quality gate — eliminate disallowed imports from production code
- mcp.go: os/filepath/strings → core.Env, core.JoinPath, core.PathExt,
core.PathBase, core.Contains, core.Replace + local helpers
- registry.go: encoding/json/strings → core.JSONUnmarshal, core.Split
- notify.go: encoding/json → core.JSONMarshalString
- tools_metrics.go: fmt/strings → core.Sprintf, core.Trim
- tools_rag.go: fmt → core.Sprintf
- tools_webview.go: fmt → core.Sprintf
- tools_ws.go: fmt → core.Sprintf
Transport files (http/tcp/unix/stdio) retain os/net/http — boundary code.
Co-Authored-By: Virgil <virgil@lethean.io>