CLI mirror for loopover_get_bounty_advisory

[JSONbored]

Context

The MCP tool loopover_get_bounty_advisory (src/mcp/server.ts:2230, via getBountyAdvisory at src/mcp/server.ts:4518) mirrors the fully public REST route GET /v1/bounties/:id/advisory (src/api/routes.ts:3611, no auth gate). No CLI stdio tool exists.

Requirements

• Add registerStdioTool("loopover_get_bounty_advisory", { inputSchema: z.object({ id: z.string().min(1) }) }, ...) proxying GET /v1/bounties/{id}/advisory.
• Consider a top-level loopover-mcp bounty <id> alias, matching how decision-pack/repo-decision get both a tool and a dedicated top-level command.

Deliverables

• registerStdioTool("loopover_get_bounty_advisory", ...)
• Optional top-level bounty command alias
• Unit test

Test Coverage Requirements

99%+ Codecov patch coverage on every changed line and branch in the new route/tool/CLI code, plus a test asserting output parity between the mirrored surfaces for identical input.

Expected Outcome

A bounty's advisory is queryable from the CLI without needing the MCP server.

Links & Resources

Precedent: registerStdioTool("loopover_get_skipped_pr_audit", ...) at loopover-mcp.js:1289 — simple public/unauthenticated apiGet proxy.

[linear-code]

JSO-4550