- Add 'Emitting over MCP' section: the oscal_assessment tool, breakpilot's
/v1/cra/oscal-from-scanner pull, and the tenant-context operational note
(task_local lost across rmcp's session spawn -> bind tenant to the session).
- Configuration: semantic + grounded passes are now default-on (validated live),
still no-op without BREAKPILOT_BASE_URL.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>