fix(mcp): register or remove dead agentic tool imports (B11) (#16)

Three agentic tools were imported but never added to the served tools
array, making them unreachable dead code: convene_llm_council and
draft_care_action (src/tools/actions.ts) and generate_pas_payload
(src/tools/da_vinci.ts). The adding commits stopped short of the array,
shipped no tests, no CHANGELOG, and no README — staged-but-unfinished,
not finished-and-forgotten.

Removed rather than registered: convene_llm_council and draft_care_action
forward to upstream-data endpoints that call frontier LLMs through
OpenRouter (no HIPAA BAA), and the council endpoint runs no DLP scrub on
its input, so exposing them on a public MCP client would re-open the PHI
boundary the dataset tools were re-derived to close. git history retains
the source if a properly bounded, tested version is wired in later.

Author: byteworthy

CHANGELOG.md

@@ -26,6 +26,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   paths move from `/api/v1/data/packs/{id}/*` to
   `/api/v1/data/catalog/{dataset_id}/*`.
 
+### Removed
+
+- **Three unfinished agentic tools removed before any release** (`convene_llm_council`,
+  `draft_care_action`, `generate_pas_payload`). They were imported but never added to the
+  served tools array, shipped without tests, CHANGELOG, or README, and were unreachable as
+  dead code. Two of them (`convene_llm_council`, `draft_care_action`) forward to the
+  upstream-data `/api/v1/score/council` and `/api/v1/actions/draft` endpoints, which call
+  frontier LLMs through OpenRouter — a provider with no HIPAA BAA — and the council endpoint
+  performs no DLP scrub on its input, so exposing them on a public MCP client would re-open
+  the PHI boundary the dataset tools were re-derived to close. Removed rather than registered;
+  git history retains the source if a properly bounded, tested version is wired in later.
+
 ### Added
 
 - `UpstreamClientConfig` + `UPSTREAM_DATA_CONFIG`: the hardened API client is now

src/index.ts

@@ -34,7 +34,6 @@ import {
 import { getDentalPayerDrift } from './tools/get_dental_payer_drift.js';
 import { getBenchmarkHistory, getBenchmarkLeaderboard, getModelScores } from './tools/benchmark.js';
 import { getBenchmarkReport, runBenchmark, scoreClaim, synthesizeClaims } from './tools/claims.js';
-import { conveneLlmCouncil, draftCareAction } from './tools/actions.js';
 
 type ToolDefinition = {
   name: string;