MCP server: static worst-case token-budget analysis for LLM-agent workflows (LangGraph/CrewAI/OpenAI-Agents) + signed budget certificates.