fix: fail closed on unresolved mcp tools (#1557)

Reject configured direct MCP selectors that cannot resolve to cached package, git package, or plugin tools before child launch. This keeps runtime-style selectors diagnostic-only until a host adapter contract exists.