feat: rename @agentkey/mcp → @agentkey/cli in install scripts and docs (#47)

## Summary

Companion change to
[chainbase-labs/AgentKey-Server#32](https://github.com/chainbase-labs/AgentKey-Server/pull/32).
The npm package has been renamed; this PR updates everything users
actually see.

**User-facing**
- \`scripts/install.{sh,ps1}\`: \`MCP_PACKAGE\` / \`$McpPackage\` →
\`CLI_PACKAGE\` / \`$CliPackage\`
- \`scripts/uninstall.{sh,ps1}\`: sweep BOTH \`@agentkey/cli\` and
\`@agentkey/mcp\` so users upgrading from v0.x get a clean uninstall
- \`skills/agentkey/SKILL.md\`: setup command + manual-config JSON
example
- \`README.md\` + \`docs/README_zh.md\`: every \`npx @agentkey/mcp\`
command + the manual-config JSON examples (switched from stale stdio
shape to the remote-HTTP shape that \`--auth-login\` actually writes in
v1.0)

**Internal / protocol docs**
- \`SECURITY.md\`: file/network audit tables
- \`protocol/skill-meta-v1.md\`, \`docs/SERVER-IMPLEMENTATION.md\`:
clarify the protocol partner is AgentKey-Server's hosted \`/v1/mcp\`
endpoint, not a standalone npm package — these references were already
misleading before the rename
- \`.claude/CLAUDE.md\`: keep Claude-session guidance in sync

\`CHANGELOG.md\` left untouched (release-please manages history).

## Sequencing

Merge this PR **after** \`@agentkey/cli\` is published to npm —
otherwise the install scripts here will reference a package that doesn't
exist yet. Recommended order:

1. Merge
[AgentKey-Server#32](https://github.com/chainbase-labs/AgentKey-Server/pull/32)
2. \`cd cli && npm publish\` (first \`@agentkey/cli\` release at
\`1.0.0\`)
3. Merge this PR

## Test plan

- [ ] Verify \`npx -y @agentkey/cli --auth-login\` works end-to-end
after npm publish
- [ ] Verify \`scripts/uninstall.sh\` on a machine with
\`@agentkey/mcp\` globally installed cleans it up
- [ ] Spot-check the rendered README on GitHub for any missed references

scripts/install.sh

@@ -18,7 +18,7 @@ set -euo pipefail
 
 # ── Constants ─────────────────────────────────────────────────────────────
 SKILL_REPO="chainbase-labs/agentkey"
-MCP_PACKAGE="@agentkey/mcp"
+CLI_PACKAGE="@agentkey/cli"
 NODE_MIN_MAJOR=18
 
 # ── Agent markers ─────────────────────────────────────────────────────────
@@ -517,7 +517,7 @@ main() {
         # the SOURCE: when AGENTKEY_TELEMETRY=0, no other context env vars
         # are exported — hostname-derived fingerprint, agent lists, and
         # installer flags are never computed nor passed to the child
-        # `npx @agentkey/mcp` process. The server treats AGENTKEY_TELEMETRY=0
+        # `npx @agentkey/cli` process. The server treats AGENTKEY_TELEMETRY=0
         # as a hard skip.
         if $NO_TELEMETRY || [ -f "$TELEMETRY_OPT_OUT_FILE" ]; then
             export AGENTKEY_TELEMETRY=0
@@ -534,9 +534,9 @@ main() {
             export AGENTKEY_DEVICE_FINGERPRINT="$(compute_device_fingerprint "$PLATFORM")"
         fi
 
-        if ! npx -y "$MCP_PACKAGE" "${AUTH_ARGS[@]}"; then
+        if ! npx -y "$CLI_PACKAGE" "${AUTH_ARGS[@]}"; then
             ui_error "MCP auth failed."
-            ui_muted "Retry manually:  npx -y $MCP_PACKAGE ${AUTH_ARGS[*]}"
+            ui_muted "Retry manually:  npx -y $CLI_PACKAGE ${AUTH_ARGS[*]}"
             exit 1
         fi
         ui_ok "MCP server registered"