HMAC-attested receipts for AI agent tool calls — verify-action-mcp

When your AI agent says 'I deleted user 12345' but the row count didn't change, this catches it. POST (claim, evidence), get back verdict + HMAC-attested receipt. MCP-compatible, cross-vendor, stdlib Python.