feat: complete SHD MCP plugin workflows and widget

plugins/shd-mcp-plugin/README.md

@@ -15,8 +15,34 @@ modules. Skills do not grant permissions or bypass server-side ACLs.
 - guarded task workflows;
 - project file inspection and actions;
 - finance and CRM read/audit workflows;
+- finance account, balance, payment and settlement audits;
+- analytics, comparisons, reports and task/proposal metrics;
+- entity resolution and duplicate-candidate analysis;
+- estimates, proposals and estimate-document-contract workflows;
+- scheduling events, slots and booking positions;
+- Wiki, notes, revisions and note-database workflows;
+- discussions, channels, topics, messages and attachments;
+- documents, templates, PDFs, revisions and public-link workflows;
+- organizations, members, invitations, ACL and two-factor policies;
+- notifications, preferences and read-state workflows;
+- inventory, assets, stock, procurement and stocktake workflows;
+- agent/controller diagnostics, tunnels, endpoints and runtime actions;
+- status-page monitors, groups, history and incidents;
+- realtime sessions, event cursors and operational activity;
+- Terms documents, revisions, completeness and contract discussions;
+- linked Gitea issues, labels, comments and attachments;
 - safe bulk-change planning and validation rules.
 
+When the connected MCP host supports MCP Apps UI, the active-projects workflow
+also has an inline widget: it sorts by the nearest completion date, filters by
+name/code, shows status pills and loads one project’s read-only details. The
+same tools still return normal structured data for hosts that do not render
+widgets.
+
+The active-projects widget is versioned in `widgets/active-projects/v1/` with a
+manifest, SHA256 checksum and source/provenance note. The SHD MCP backend reads
+that artifact for the `ui://shd/active-projects/v1.html` resource.
+
 ## MCP connection
 
 The package points to `https://shd.xyz.su/mcp` and requests OAuth for that MCP