feat: structured __renderer envelopes for MCP tools

All 19 oikos tools now return JSON envelopes with __renderer hints
(terminal, service_status, ping, path_report, etc.) carrying structured
data alongside the model-facing prose in a `message` field — agent
behavior is unchanged while the UI renders native cards.

Fixes: ping_service SQL (json||text precedence), timestamptz scan,
run:{...} action prefix parsing, get_execution_status target slug join.

Also: deploy.sh step 5.5 restarts dsh web after API deploy; watchdog
LaunchAgent detects API recovery and kickstarts dsh web for stale MCP
sessions.

scripts/deploy.sh

@@ -230,6 +230,8 @@ DOCKER_BUILDKIT=1 docker compose --profile "$PROFILE" build \
 # ── 5. Rolling restart ────────────────────────────────────────────────────
 echo "[5/8] docker compose up -d"
 docker compose --profile "$PROFILE" up -d --remove-orphans
+echo "[5.5/8] restarting dsh web (stale MCP session after api restart)"
+launchctl kickstart -k "gui/$(id -u)/network.hubris.dsh-web" 2>/dev/null || true
 
 # ── 6. Prune old image tags — keep the 3 newest per service so rollback ────
 #    (OIKOS_VERSION=v0.x.y docker compose up) stays available. The repo list