feat(sdk): expose nine Omni routes and paid MCP

[InTheta]

What changed

• adds typed protected MCP consumption for four bounded Omni tools
• expands the deterministic HTTP recipe catalog from seven routes/23 plans to nine routes/25 plans
• adds typed Entity Resolution and Market Carry responses
• emits the bounded JSON POST contract for entity resolution
• upgrades the no-spend partner check, CLI, docs, generated package output, and package smoke gates to the nine-route production catalog

Why

Omni production and CDP Bazaar now expose nine funded HTTP products plus four paid MCP tools, while the public SDK still described the older seven-route surface and had no typed MCP gateway method.

Developer impact

External agents can construct entity-resolution and carry purchases without hand-building requests, and can call all four paid MCP tools through ACM's grant-bound protected payer.

Validation

• full npm run verify in a clean locked install
• 22 SDK tests and strict external-consumer typecheck
• packed-package and clean-room install smoke tests
• live no-spend CDP Bazaar check: nine canonical Omni routes present, 12 receiver listings total, no secrets or payment