mcp: manifest fetcher reads full body before _MAX_MANIFEST_BYTES check

[thinmintdev]

Surfaced by PR #368 reviewer. src/hal0/mcp/manifest.py _default_fetcher should stream + abort on size threshold. Risk: server without Content-Length can exhaust memory before guard fires. Low severity (256KB cap is small) but worth fixing.