fix(plugins): corrective pass on remaining #178 tool-name drift

[asachs01]

What

Ran #178's confirmed-drift list (18 vendors) through parallel per-plugin fixes. Each fix was independently verified against real ground truth (server source, live gateway tools, or this repo's own tool-drift-audit.mjs) — not applied mechanically from the audit's tables.

14 of the 18 were already fixed by prior PRs (#197, #198, #200, #201) — nothing to do there. Real remaining work:

• rootly — full rewrite of 4 skills (postmortems, services, alerts, workflows) that documented a fictional API surface. The gateway routes rootly to the hosted mcp.rootly.com server, not the local repo, and several skills invented tool names that exist on neither. Also fixed api-patterns/incidents renames, added missing mcp__rootly__* frontmatter to both agents (previously undeclared — neither agent could actually call Rootly), reconciled README/CHANGELOG drift.
• freshdesk, timezest, connectwise/manage — small residual drift the earlier bulk passes missed.
• kaseya/it-glue — the one confirmed-drift item was a false positive (only appeared inside a "not X" warning). The live audit surfaced 4 real phantom "location" tools nearby that were never in Tool-name drift audit: skills documenting tools their servers don't expose #178's scope and are fixed here too.

Two plugins outside #178's original list, found by re-running the fleet audit live during this pass:

• kaseya/autotask — 2 fictional contract tools from a recent addition (docs(autotask/contracts): document contract management tools from autotask-mcp#238 #212), including one instance the audit script missed.
• mailprotector — 3 genuine renames; 6 of 9 audit-flagged names turned out to be real SDK field/enum names, not tool references — left untouched after verifying against mailprotector-mcp source directly.

Verification

• node scripts/tool-drift-audit.mjs --plugins . --servers ~/mcp --gateway ~/mcp/mcp-gateway — 0 real drift remaining (mailprotector shows 5 items the script flags as drift, confirmed false positives — real field/enum names the script can't distinguish from tool names)
• node scripts/check-doc-references.mjs — pass
• node scripts/check-tool-anchoring.mjs — pass
• claude plugin validate . — pass

Not in scope here (per #178's own scoping)

• email-security/checkpoint-avanan governance gap (largest undocumented-tools risk — zero docs, 1 irreversible-delete tool)
• The broader "undocumented tools" pass across the fleet
• pax8 (needs a live token to verify; also has a separate CI hazard worth its own issue on pax8-mcp)

Refs #178

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}