feat(SMI-1814): support internal source-backed connections

[calclavia]

Summary

• bump @smithery/api to 0.67.0 for the generated source target types
• add a hidden internal source-backed connection path for mcp add, with namespace create/set support and explicit rejection of incompatible install/config options
• submit one TypeScript entrypoint from either a cwd-relative file path or stdin (--source -), format invalid_module diagnostics, and forward source targets through ConnectSession
• route dynamic-module tool listing and calls through mcp.smithery.run so smithery tool list/call works for source-backed connections

Review follow-up

• addressed council findings for raw argv parsing, name defaults, local import handling, source size guardrails, and non-destructive conflict behavior
• verified the option is hidden from command help and no user-facing docs were added

Smoke proof

• created codex-pipe-proof in namespace calclavia using cat .context/codex-pipe-proof.ts | node dist/index.js --json mcp add --source - --id codex-pipe-proof ...
• verified node dist/index.js --json tool list codex-pipe-proof --flat --limit 20 returns proof_ping
• verified node dist/index.js --json tool call codex-pipe-proof proof_ping '{"echo":"cli dynamic invocation"}' returns marker SMI-1814-pipe-proof-20260530

Tests

• pnpm install --frozen-lockfile
• pnpm run check
• pnpm test
• pnpm typecheck
• pnpm run build
• node dist/index.js mcp add --help | rg -e '--source|support\\.ts|dynamic MCP|TypeScript module' || true