feat(agent): bring-your-own-MODEL - any AI drives the frozen MCP surface

[NickFlach]

What

Opens the BYO-key agent (#231) to any model, not just Claude — the frozen MCP surface (ADR-0020) was built for any external consumer, and now the agent honors that:

• scripts/qos_agent.py — the provider-agnostic entrypoint.
  • --provider anthropic (default): Claude via the Anthropic SDK's tool_runner + MCP conversion helpers — behavior unchanged from feat(agent): Claude drives QuantumOS via the frozen MCP tools (BYO key) #231.
  • --provider openai: any OpenAI-compatible /chat/completions endpoint — OpenAI, OpenRouter, Groq, DeepSeek, LM Studio, llama.cpp server, or a keyless local Ollama (--base-url http://localhost:11434/v1). A plain function-calling loop converts the same 22 frozen MCP tools to function schemas directly (still zero tool duplication) and feeds tool errors back to the model instead of dying.
  • Credentials resolve before any VM spawns; the guaranteed-shutdown finally and the --max-turns key-burn guard cover both providers.
• scripts/qos_claude_agent.py → compat shim; the old CLI works verbatim.
• requirements-agent.txt (anthropic[mcp] + openai + mcp); requirements-claude-agent.txt now -r-includes it.
• Makefile: qos-agent / qos-agent-list with PROVIDER= / MODEL= / BASE_URL= knobs; qos-claude / qos-claude-list kept as aliases.

Post-launch README refresh

• The roadmap still listed ADR-0019 / ADR-0020 / ADR-0021 as planned — all three shipped in v0.5. Replaced with a ✅ v0.5 Done block and an honest Next (N=5 societies, audit actor attribution).
• MCP tool count corrected 21 → 22 (matches contracts/mcp/v1-tools.json), BYO-model agent surfaced in "What runs today", Contributing pointers updated.

Verified (WSL, no key spent)

• py_compile both entrypoints.
• --list-tools enumerates all 22 tools end-to-end through both qos_agent.py and the shim.
• Missing-key and missing-model guards exit cleanly before any VM boots.
• MCP→OpenAI schema conversion of the real 22-tool list is well-formed and JSON-serializable.
• Live agent loops remain bring-your-own-key by design and were not run.

🤖 Generated with Claude Code