test(trust-boundary): pin takes_proposal_resolve in KNOWN_LOCAL_ONLY

The list's own contract says every new localOnly op gets pinned by name so
a refactor that sheds the flag fails loudly instead of silently exposing a
repo-writing op over HTTP MCP.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

test/operations-trust-boundary.test.ts

@@ -153,6 +153,9 @@ describe('mcpOperations filter — localOnly ops are excluded from the HTTP-expo
       'purge_deleted_pages',
       'get_recent_transcripts',
       'code_traversal_cache_clear',
+      // #1467: accept writes markdown into the local brain repo (with a
+      // caller-supplied dir) — must never be exposed over HTTP MCP.
+      'takes_proposal_resolve',
     ];
     const lookup = new Map(operations.map(op => [op.name, op] as const));
     for (const name of KNOWN_LOCAL_ONLY) {