feat: add preview-first CRM Gmail sweep

[rudijetson]

Summary

• add rudi crm sweep-gmail with explicit account and date bounds
• read only Gmail address headers and exclude spam/trash
• default to an owner-only preview artifact with no CRM writes
• gate idempotent discovery recording, heuristics, ingest logging, and validators behind --record
• never create, merge, attach, or promote CRM people
• add a bounded canonical-router MCP stdio client and failure-path coverage
• use neutral mailbox examples in public docs and tests

Closes #19.

Verification

• focused CRM/MCP/routing/help/export tests: 69 passed, 0 failed
• pnpm test: 669 passed, 0 failed
• pnpm build: passed; tracked bundle reproduced cleanly after commit
• debt scan: 0 findings
• npm pack --dry-run --json: passed with 6 expected package files
• git diff --check: passed
• Google Workspace and RUDI CRM tool names, inputs, and outputs were checked against the installed/current Registry source

Operational boundary

No live Gmail sweep or CRM write was performed. Real preview or record execution remains a separately authorized post-merge operator action.

Stack

This PR is intentionally based on fix/17-tool-index-process-trees (#18) because each CLI concern regenerates dist/index.cjs. After #18 lands, retarget this PR to main.