mcp-sudo

Run sudo commands with a Fernet-encrypted password bound to machine-id + user.