Remove retired servers and fix Octocode provenance

[danbarr]

Remove seven MCP server packages that upstream has retired or superseded, so Dockyard stops building and publishing new images for them. Also correct Octocode packaging metadata and record its published source commit.

• AWS Diagram: removed upstream, with pinned PyPI version 1.0.23 yanked in favor of the diagram agent skill.
• PagerDuty: local server archived and deprecated in favor of hosted Remote MCP.
• Browserbase: repository archived and unmaintained; upstream recommends hosted MCP.
• JetBrains: proxy deprecated in favor of MCP built into IntelliJ-based IDEs since 2025.2.
• Bankless Onchain: upstream no longer receives updates.
• Magic MCP: superseded by hosted 21st MCP; the npm package is now a compatibility proxy.
• IDA Pro MCP: upstream recommends official Hex-Rays IDA MCP. This removal is a replacement decision, not a claim that the entire upstream package is deprecated.

Also remove Browserbase's package-specific security notes and replace its Taskfile scan examples with Playwright.

For Octocode, correct the stale image comment from 12.0.0 to the packaged 19.1.0, update the repository URL to bgauryy/octocode, and replace mutable main with npm 19.1.0's published gitHead (24ada10033de01215be62f53cd9293fbf36ca72a). The installed amd64 image package was verified as 19.1.0. This resolves the repository-mismatch warning and records a stable source reference; upstream still advertises registry signatures rather than SLSA build provenance. Remove the now-redundant minimatch and protobufjs overrides: a fresh npm dependency resolution of octocode-mcp@19.1.0 without overrides selects minimatch@10.2.6 and contains no protobufjs.

Keep Notion: its local implementation still accepts changes despite the README's unsupported status. AWS skill packaging is tracked separately in #481. No replacement server specs are added: most replacements are hosted or IDE-integrated; Hex-Rays requires IDA 9.4+ with idalib and needs a separate integration assessment.

Validation: git diff --check passed. dockhand verify-provenance -c npx/octocode-mcp/spec.yaml -v passed without a repository-mismatch warning (status: SIGNATURES). Confirmed the source package version at the recorded commit is 19.1.0 and that npm metadata names that commit as its gitHead. Confirmed the container workflow discovers existing spec files dynamically. Dockerfile generation passed after removing the overrides, and a fresh lockfile-only npm resolution was checked with lifecycle scripts disabled. No runtime code changed, and no container builds or scans were run. Existing published images are not deleted by this PR.

[toolhive-release-app]

🔒 MCP Security Scan Results

✅ octocode-mcp

• Status: Passed
• Tools scanned: 9
• Result: No security issues detected

---

Summary: Scanned 1 MCP server(s), all passed security checks. ✅