routes delete_job through the shared ops endpoint

Pin the MCP server's JSON-RPC contract end-to-end: the dispatcher handshake + tools/list completeness vs the TOOLS registry; per-tool happy/error paths with the wsId-required audit (no tool may write without an explicit workspace id); the deterministic process_request id (kind prefix + 16-byte hex digest) so add_job/tailor/evaluate_job dedup on retry; and the focused update_job patch shaping that the agent surface depends on.