feat: deploy jarca ledger network mcp service

- add Docker deployment for independent jarca-ledger container
- enable FastMCP streamable-http runtime configuration
- document dcy-013, REQ-019, and BAT-015 verification evidence
- update structure/runtime baselines and deployment runbook

docs/runbooks/docker-network-mcp-deploy.md

@@ -0,0 +1,62 @@
+# Jarca Ledger Docker Network MCP 배포 Runbook
+
+## 목적
+
+`jarca-ledger`를 `genichin-agent` 생명주기와 분리된 독립 Docker 서비스로 배포하고, stdio `docker exec`가 아니라 HTTP 기반 Streamable MCP endpoint를 직접 제공한다.
+
+## 운영 고정값
+
+| 항목 | 값 |
+|---|---|
+| 컨테이너 이름 | `jarca-ledger` |
+| 이미지 | `jarca-ledger:latest` |
+| Host data path | `/volume1/docker/jarca-ledger/data` |
+| Container data path | `/data` |
+| SQLite DB | `/data/ledger.sqlite3` |
+| MCP transport | `streamable-http` |
+| MCP listen | `0.0.0.0:8000` |
+| MCP path | `/mcp` |
+
+## 배포
+
+```bash
+cd /home/ubuntu/workspaces/jarca-ledger-mcp
+docker compose up -d --build
+```
+
+## 검증
+
+```bash
+docker ps --filter name=jarca-ledger
+docker inspect jarca-ledger --format='MOUNTS: see HostConfig.Binds and Mounts in docker inspect output'
+docker inspect jarca-ledger | python3 -c "import json,sys; data=json.load(sys.stdin)[0]; [print(f'{m.get(\"Source\")} -> {m.get(\"Destination\")} ({m.get(\"Type\")})') for m in data.get('Mounts', [])]"
+docker logs --tail 80 jarca-ledger
+```
+
+Python MCP client smoke:
+
+```bash
+python - <<'PY'
+import anyio
+from mcp import ClientSession
+from mcp.client.streamable_http import streamablehttp_client
+
+async def main():
+    async with streamablehttp_client('http://127.0.0.1:8000/mcp') as (read, write, _):
+        async with ClientSession(read, write) as session:
+            await session.initialize()
+            tools = await session.list_tools()
+            print('tool_count', len(tools.tools))
+            result = await session.call_tool('ledger_health_check', {})
+            print(result.content[0].text)
+
+anyio.run(main)
+PY
+```
+
+## 운영 원칙
+
+- `jarca-ledger` 컨테이너는 Docker daemon의 `restart: unless-stopped` 정책으로 독립 실행된다.
+- `genichin-agent`는 이 서비스를 배포하거나 실행시키는 필수 구성요소가 아니다.
+- 재무관리 에이전트는 `http://<synology-host>:8000/mcp` 또는 같은 Docker network에서 `http://jarca-ledger:8000/mcp`로 접속한다.
+- 운영 DB와 import 원본/민감자료는 이미지에 포함하지 않고 `/volume1/docker/jarca-ledger/data`에만 둔다.