Machine-readable governed-interface manifests for MCP servers: authority classes, preconditions, receipts, rollback