Add Microsoft agent integrations

[Jason-Doyle]

Summary

• expose authenticated stateless Streamable HTTP MCP with a read-only default and separately gated writes
• add Microsoft Agent Framework local and remote examples plus an Azure SRE Agent integration guide and declarative agent definition
• wire remote MCP configuration through Compose, Helm, Azure, AWS, and GCP with deployment-time validation
• extend CI, release packaging, compatibility checks, security documentation, and benchmark evidence

Security and compatibility

• authenticate and revalidate identity, purpose, scope, expiry, revocation, and tenant state on every MCP request
• enforce exact public Host and supplied Origin values, POST-only transport, bounded bodies, and rejection of JSON-RPC batches
• preserve existing ProductionConfig consumers by keeping the new MCP fields optional
• keep remote write discovery disabled unless explicitly enabled

Validation

• npm run release:check
• npm run deployment:check
• python scripts/validate-microsoft-integrations.py
• npm audit --omit=dev --audit-level=low
• fresh PostgreSQL 18 integration suite: 55 passed, 2 intentionally skipped
• npm run benchmark:sre:verify
• scripts/test-backup-restore.ps1
• linux/amd64 and linux/arm64 container smoke tests