Snapshots an MCP server's public surface (tools, resources, prompts, capabilities) into a committed mcp.lock.json and fails CI when the contract changes in a breaking way.