Add MCP classifier commands

[leet-c1]

Summary

• add first-class c1i mcp classifiers commands for classifier, binding, template, singleton policy, and tool-gate public REST surfaces
• preserve complex rule documents through JSON body files and explicit update masks
• document the commands and add request-shape, pagination, and response-unwrapping coverage

Validation

• GOTOOLCHAIN=auto go test ./...
• Expert review completed; named envelope handling and required classifier update fields were corrected.
• Authenticated against https://leet.conductor.one. Every available classifier read endpoint currently returns 404, so live CRUD validation is blocked pending the lab deployment containing the public routes. This PR is not ready to merge until those commands are exercised end to end.