test(mcp): resolve baseline toml path and restore mcp server integration tests (fixes #527)

[i-am-paradox]

Summary

Fixes #527. Restores skipped MCP server integration tests and aligns assertions with current framework tools and configuration paths:

1. Resolves openssf-baseline.toml via importlib.resources.files("darnit_baseline") directly without dead-code fallbacks in tests/integration/test_mcp_server.py and tests/darnit/server/test_factory.py.
2. Asserts baseline TOML file existence in both test modules (including a module-scoped autouse fixture in test_mcp_server.py) so missing configurations fail tests immediately rather than skipping silently.
3. Marks tests/integration/test_mcp_server.py with pytest.mark.integration so CI (pytest tests/ -m integration) discovers and executes the test module.
4. Updates expected_tools in test_server_starts_and_lists_tools from 18 to 22, including harness-loop (run_next_action, submit_action_result) and judgment (submit_judgment, confirm_pass_candidate) tools.
5. Updates test_audit_with_tags_filter to assert on each returned control's actual domain definition against openssf-baseline.toml controls table rather than relying on control ID substring matching.
6. Adds test_get_pending_data_and_confirm_project_data testing get_pending_data and confirm_project_data round trips over MCP.

Type of Change

• Bug fix (non-breaking change fixing an issue)

Testing

• Tests pass locally (uv run pytest tests/ -v)
• Added tests for new functionality (if applicable)
• Linting passes (uv run ruff check .)

Ran locally:

• uv run pytest tests/integration/test_mcp_server.py tests/darnit/server/test_factory.py -v: 28 passed
• uv run ruff check tests/integration/test_mcp_server.py tests/darnit/server/test_factory.py: 0 errors
• uv run ruff format --check tests/integration/test_mcp_server.py tests/darnit/server/test_factory.py: clean
• uv run python scripts/validate_sync.py --verbose: all validations successful

AI assistance

• AI assistance was used

Assisted by Antigravity (Gemini 2.5 Pro) for tracing test skips and drafting test assertions. All changes reviewed, verified, and tested against local pytest suite and sync validator.

Additional Notes

Fixes #527

[Marc-cn]

Thanks, this works: on main these two files give 19 passed / 8 skipped, on your branch 28 passed / 0 skipped.

Before merging:

1. AI disclosure. AI_POLICY.md asks for the tool(s) and which parts are AI-generated, plus an Assisted-by: AGENT:MODEL trailer. You did both on #537; here the tool is not named and the commit has no trailer. Please add them.
2. The fallback path is dead code. files("darnit_baseline") already resolves to packages/darnit-baseline/src/darnit_baseline/openssf-baseline.toml, the same file. Please drop the fallback in both files.
3. test_audit_with_tags_filter: why hardcode STAGE1-REF-SECURITY-01? It has domain = "VM", so the filter is right and the ID check was the wrong proxy. #527 left this as an open decision. Can you explain your reasoning, and whether the test can assert on the control's domaininstead?

Optional: these tests went dark because a missing TOML is a skip. Making that a failure would stop it happening again.

Heads-up: #570 also touches tests/darnit/server/test_factory.py, so you may need to rebase.

[i-am-paradox]

Addressed review points:

1. Rebased on current main (absorbing chore: fold darnit-example's test fixtures into darnit-testchecks and remove it (#487 part 3) #570).
2. Added the Assisted-by: Antigravity:eni-gemini-2.5-pro trailer to the commit and updated the PR description disclosure with tool name and scope per AI_POLICY.md.
3. Dropped the fallback paths in both files. Added assertions for baseline TOML presence (including a module-scoped autouse fixture in test_mcp_server.py) so missing configurations fail rather than skip.
4. In test_audit_with_tags_filter, replaced the substring/ID check with a domain verification against each returned control's definition in the baseline controls table (ctrl.get("domain") or ctrl.get("tags", {}).get("domain") == "VM").