feat(cartridges): add provider framework + 3 new cartridges (18→21)

Cloud-mcp gains provider dispatch with Verpex (cPanel UAPI), Cloudflare
(Workers/D1/KV/R2/DNS), and Vercel (projects/deployments/domains/functions)
as Grade D Alpha stubs with full ABI+FFI+Adapter layers.

Three new cartridges created following the same proven pattern:
- comms-mcp: Gmail + Google Calendar (OAuth2 session management)
- ml-mcp: Hugging Face (model search, inference, spaces, datasets)
- research-mcp: Scholar Gateway + Semantic Scholar + OpenAlex

MCP bridge updated to v0.3.0 with 7 new provider-specific tools.
55 new tests, all passing. 4 .so files built.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

cartridges/cloud-mcp/abi/CloudMcp/SafeCloud.idr

@@ -68,6 +68,9 @@ data CloudProvider
   | GCloud         -- Google Cloud Platform
   | Azure          -- Microsoft Azure
   | DigitalOcean   -- DigitalOcean
+  | Verpex         -- Verpex hosting
+  | Cloudflare     -- Cloudflare
+  | Vercel         -- Vercel platform
   | Custom String  -- User-defined provider
 
 ||| C-ABI encoding.
@@ -77,8 +80,84 @@ providerToInt AWS            = 1
 providerToInt GCloud         = 2
 providerToInt Azure          = 3
 providerToInt DigitalOcean   = 4
+providerToInt Verpex         = 5
+providerToInt Cloudflare     = 6
+providerToInt Vercel         = 7
 providerToInt (Custom _)     = 99
 
+-- ═══════════════════════════════════════════════════════════════════════════
+-- Provider Capabilities
+-- ═══════════════════════════════════════════════════════════════════════════
+
+||| Capabilities a cloud provider may support.
+public export
+data ProviderCapability
+  = Workers       -- Serverless workers / functions
+  | KV            -- Key-value storage
+  | R2            -- Object storage (R2-style)
+  | DNS           -- DNS zone and record management
+  | Deployments   -- Site / project deployments
+  | D1            -- Serverless SQL databases
+  | Pages         -- Static site hosting / Pages projects
+
+-- ═══════════════════════════════════════════════════════════════════════════
+-- Cloudflare Resource Types
+-- ═══════════════════════════════════════════════════════════════════════════
+
+||| Resource types available on the Cloudflare provider.
+public export
+data CloudflareResource
+  = CfWorker          -- Workers script
+  | CfD1Database      -- D1 serverless SQL database
+  | CfKVNamespace     -- KV namespace
+  | CfR2Bucket        -- R2 object storage bucket
+  | CfDNSZone         -- DNS zone
+  | CfDNSRecord       -- DNS record within a zone
+  | CfPagesProject    -- Pages deployment project
+
+||| C-ABI encoding for Cloudflare resource types.
+public export
+cfResourceToInt : CloudflareResource -> Int
+cfResourceToInt CfWorker       = 1
+cfResourceToInt CfD1Database   = 2
+cfResourceToInt CfKVNamespace  = 3
+cfResourceToInt CfR2Bucket     = 4
+cfResourceToInt CfDNSZone      = 5
+cfResourceToInt CfDNSRecord    = 6
+cfResourceToInt CfPagesProject = 7
+
+||| Map Cloudflare to its supported capabilities.
+public export
+cloudflareCapabilities : List ProviderCapability
+cloudflareCapabilities = [Workers, KV, R2, DNS, Deployments, D1, Pages]
+
+-- ═══════════════════════════════════════════════════════════════════════════
+-- Vercel Resource Types
+-- ═══════════════════════════════════════════════════════════════════════════
+
+||| Resource types available on the Vercel provider.
+public export
+data VercelResource
+  = VclProject            -- Vercel project
+  | VclDeployment         -- Deployment instance
+  | VclDomain             -- Custom domain
+  | VclEnvVar             -- Environment variable
+  | VclServerlessFunction -- Serverless function (lambda)
+
+||| C-ABI encoding for Vercel resource types.
+public export
+vclResourceToInt : VercelResource -> Int
+vclResourceToInt VclProject            = 1
+vclResourceToInt VclDeployment         = 2
+vclResourceToInt VclDomain             = 3
+vclResourceToInt VclEnvVar             = 4
+vclResourceToInt VclServerlessFunction = 5
+
+||| Map Vercel to its supported capabilities.
+public export
+vercelCapabilities : List ProviderCapability
+vercelCapabilities = [Deployments, DNS, Workers]
+
 -- ═══════════════════════════════════════════════════════════════════════════
 -- Session Record
 -- ═══════════════════════════════════════════════════════════════════════════