feat(mcp): remote instance (device) read tools

[andypalmi]

Summary

Phase 1 read-only MCP tools for the remote instance (device) resource, added to forge/ee/lib/mcp/tools/devices.js:

• platform_get_remote_instance_audit_log - GET /devices/:deviceId/audit-log, takes a format: 'json' | 'csv' argument. json reads audit-log entries; csv exports the CSV via GET /devices/:deviceId/audit-log/export.
• platform_list_team_provisioning_tokens - GET /teams/:teamId/devices/provisioning

Each tool describes the device resource, so all are filed with the existing device tools, following the one-file-per-resource convention. All tools are annotated readOnlyHint: true, destructiveHint: false.

platform_list_team_provisioning_tokens returns the summary view, which omits the token secret.

Scopes allow-listed in IMPLICIT_TOKEN_SCOPES['user:expert-mcp'] (forge/routes/auth/permissions.js):

• device:audit-log
• team:device:provisioning-token:list

Write, delete, and credential-issuing endpoints for this resource are out of scope for this PR.

Closes #7708

Consolidation notes

• The remote HTTP-tokens and remote history tools that this PR originally carried are folded into the generalized platform_list_instance_http_tokens and platform_get_instance_history tools on feat(mcp): hosted instance read tools #7727. Each takes an instanceType: 'hosted' | 'remote' argument and so serves remote instances (devices) too, removing the need for remote-only variants here. The project:history scope and the remote HTTP-tokens scope move with those tools to feat(mcp): hosted instance read tools #7727.
• Audit read and export are combined into a single platform_get_remote_instance_audit_log tool via a format: 'json' | 'csv' argument: json reads entries and csv exports the CSV through the /export route.

Test plan

• eslint on changed files passes with no errors
• mocha on changed files passes
• CI

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 76.27%. Comparing base (a8f760b) to head (3f10c03).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #7726      +/-   ##
==========================================
+ Coverage   76.17%   76.27%   +0.10%     
==========================================
  Files         440      440              
  Lines       23604    23615      +11     
  Branches     6285     6286       +1     
==========================================
+ Hits        17981    18013      +32     
+ Misses       5623     5602      -21     

Flag	Coverage Δ
backend	76.27% <100.00%> (+0.10%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.