docs: point to the hosted MCP server at www.aeon.fun/connect/mcp

[aaronjmars]

Points users to the new hosted MCP server at https://www.aeon.fun/connect/mcp (Aeon Connect: Streamable HTTP, OAuth 2.1 with GitHub sign-in, runs on the repo's own GitHub Actions, no secret values over MCP).

What changed

• README: quick start paragraph, a line in the top callout, Docs button alt text, and an opt-in note in "Private by design".
• apps/mcp-server/README.md: retitled "(local)", new "Hosted or local?" section with a comparison table, the hosted how-to and the name-clash note.
• Setup skill (both copies, kept in sync): canonical "three things share the name" row in references/mcp.md, plus a short chat-app blockquote in Mode 1.
• CHANGELOG (Unreleased > Added), llms.txt, .github/SECURITY.md (scope, write tools, how to cut access), docs/aeon-setup.md (five front doors), docs/CONFIGURATION.md, docs/mcp-oauth.md, docs/ADK.md, docs/examples/README.md, .github/CONTRIBUTING.md.
• Dashboard MCP panel header and ./aeon mcp help: one pointer each to the hosted server.

bin/add-mcp name-clash guard

bin/add-mcp runs claude mcp remove aeon before adding the local server as aeon, which silently deleted a hosted aeon entry. It now checks claude mcp get aeon first: on install it warns and says how to keep both (claude mcp add --transport http aeon-cloud https://www.aeon.fun/connect/mcp); on --uninstall it leaves a hosted entry alone. Help text gains the hosted alternative, and the stale claude -p - line now says skills run through harness-adapter/run-harness.

Checks run

• bash scripts/check-aeon-skill-sync.sh OK
• node scripts/validate-readme-catalog.mjs OK (85 skills)
• bash -n, shellcheck, bash scripts/lint-shell.sh on bin/add-mcp OK; shfmt -d shows only the same pre-existing diffs as main
• bin/add-mcp --help output checked; hosted detection tested with a stub claude (hosted entry kept, local entry removed)
• apps/dashboard: typecheck OK, lint 0 errors (warnings pre-existing)
• apps/cli: typecheck OK, lint OK
• No en or em dashes in added lines

Not touched here: plugin manifests, plugin/README.md, plugin/SECURITY.md, plugin/skills/get-started and marketplace files (owned by the plugin 0.2 PR).