Add local JSON daemon and route TUI/CLI through it.

A per-DataDir background process owns ticket JSON, history, and sync so
multiple TUI instances stay consistent; MCP token APIs are ready for phase 2.

Co-authored-by: Cursor <cursoragent@cursor.com>

internal/project/meta.go

@@ -54,11 +54,18 @@ func (t TaskMaster) Configured() bool {
 		strings.TrimSpace(t.ProjectID) != ""
 }
 
+// McpAuth holds the hashed local MCP token for a project (plaintext never stored).
+type McpAuth struct {
+	TokenHash string `json:"tokenHash"`
+	CreatedAt string `json:"createdAt,omitempty"`
+}
+
 // Meta is per-project metadata stored beside tickets.json.
 type Meta struct {
 	Backend    string      `json:"backend,omitempty"` // none|youtrack|taskmaster
 	YouTrack   *YouTrack   `json:"youtrack,omitempty"`
 	TaskMaster *TaskMaster `json:"taskmaster,omitempty"`
+	McpAuth    *McpAuth    `json:"mcpAuth,omitempty"`
 }
 
 // EffectiveBackend returns the sync backend kind, with legacy youtrack inference.