docs(scheduler-agent): update design doc with cluster verification results

- Design doc v1.2: Phase 0-1 cluster verification status (read + submit OK,
  control HTTP 500 open bug-1490), bug table for whitelist/job_status fixes,
  mcp_operator queue:control note.
- Root + frontend CLAUDE.md: reflect verified state and apiserver bugs found.
- wolf memory/anatomy/buglog: log deployment session, bug-1489/bug-1490.

Co-Authored-By: Claude <noreply@anthropic.com>

.wolf/anatomy.md

@@ -1199,6 +1199,25 @@
 ## src/frontend/apiserver/config/
 
 - `auth.yaml` — Authentication provider: config_file | pam | ldap | oauth2 (~187 tok)
+- `rbac.yaml` — Roles/permissions; includes mcp_readonly (Phase 0) + mcp_operator (Phase 1, queue:submit + job:control) (~1.4k tok)
+
+## src/frontend/schedulerclient/
+
+- `client.go` — Client interface: 6 read + 4 write (SubmitJob/CancelJob/HoldJob/ReleaseJob) methods (~0.5k tok)
+- `types.go` — URM types (URMJob/URMQueue/URMNode/JobFilter/LogOpts/Page/Metrics) (~1k tok)
+- `httpclient.go` — resty v3 read implementation (GET, apiEnvelope, mbToBytes=1e6) (~3.5k tok)
+- `write.go` — Phase 1: JobSpec, SubmitJobResult, JobControlRequest, doPost (HTTP 200 + envelope-code), SubmitJob/Cancel/Hold/Release impl (~3k tok)
+- `statusmap.go` — Status string → URM mapping functions (~0.9k tok)
+- `write_test.go` — httptest TDD for write paths (~2.5k tok)
+- `statusmap_test.go` — Table-driven status mapping tests (~0.9k tok)
+
+## src/frontend/mcp-server/
+
+- `cmd/main.go` — MCP stdio entry; registers 10 tools (6 read + 4 write), env XCE_API_URL/XCE_API_KEY (~2k tok)
+- `internal/app.go` — Tool handlers wiring schedulerclient (read + write) (~3k tok)
+- `internal/templates.go` — JobTemplate registry + general_serial (通用串行脚本) + parseMemoryToBytes/parseWalltimeSeconds (~3k tok)
+- `internal/app_test.go` — fake-client handler TDD (~2.5k tok)
+- `internal/templates_test.go` — Template/registry/parser TDD (~2k tok)
 
 ## src/frontend/xcecli/cmd/auth/