feat(auth): split inventory scope out of server scope

Carve a new nezha:inventory:{read,delete,*} resource family out of
nezha:server:*. Listing and deleting servers/server-groups (GET /server,
/server-group, /ws/server, batch-delete/server[-group], MCP server.list)
now require nezha:inventory:*, while nezha:server:* covers per-server
runtime operations (get, exec, fs, config, metrics, batch-move,
force-update).

Also declare MCP tool OutputSchema for exec/fs/meta/server/transfer and
wrap server.list output in {servers,count} so strict MCP clients accept
the structured result. Correct the /file all-of scope entry and the stale
server:read documentation.

cmd/dashboard/controller/mcp_tools_exec.go

@@ -51,6 +51,19 @@ func init() {
 			},
 			"required": []string{"server_id", "cmd"},
 		},
+		OutputSchema: map[string]any{
+			"type": "object",
+			"properties": map[string]any{
+				"exit_code":        map[string]any{"type": "integer"},
+				"stdout":           map[string]any{"type": "string"},
+				"stderr":           map[string]any{"type": "string"},
+				"duration_ms":      map[string]any{"type": "integer"},
+				"stdout_truncated": map[string]any{"type": "boolean"},
+				"stderr_truncated": map[string]any{"type": "boolean"},
+				"timed_out":        map[string]any{"type": "boolean"},
+			},
+			"required": []string{"exit_code", "stdout", "stderr", "duration_ms"},
+		},
 		RequiredScope: model.ScopeServerExec,
 		Handler:       handleServerExec,
 	})