feat(server): integrate MCP queries and investigation messaging

Add project-bound OAuth MCP queries and controlled analysis with scoped evidence,
limits, timeouts and a nearby-model spatial query using EPSG:4326 inputs.
Default nearby searches to 200 meters and five results.

Integrate investigation messaging/presentation, health/readiness and typed history;
remove duplicate web search and fix online simulation and compressed baseline writes.
Include project migrations 023-025; keep local credentials and demo seeding excluded.

Validation: 319 focused pytest checks; real PostGIS temporary-table regression;
read-only Jinqian bridge radius comparison; cross-language MCP discovery/calls.

app/infra/audit/middleware.py

@@ -61,7 +61,10 @@ class AuditMiddleware(BaseHTTPMiddleware):
         "/api/v1/audit/session-events",
         "/audit/session-events",
     }
+    # Query handles and source arguments are not legacy REST audit payloads.
+    # Task queries persist scoped evidence/receipts in their own transaction.
     EXCLUDED_PATH_PREFIXES = (
+        "/api/v1/mcp-query-contexts",
     )
 
     async def dispatch(self, request: Request, call_next: Callable) -> Response: