Inner-agent dispatcher hook: barycenters admit (shadow)

[damilolaphillips]

Hook the inner agent's tool dispatcher once; call npm barycenters (bary.govern / admit) in shadow before the tool runs. NemoClaw is the OpenShell host, not a fourth agent.

Connecting MCP at https://barycenters-admit.fly.dev/mcp/ is a side door (admit, check_readiness); allow OpenShell egress only to https://barycenters-admit.fly.dev.

Lifecycle: https://barycenters.ai — adapter spec: https://barycenters.ai/adapters

This is not a README patch. NVIDIA contributing forbids third-party README links. Shadow default; enforce is a human flip.