Fix MCP timeouts — now uses a single deadline across sync/async paths. Expired queued requests are skipped before dispatch; in-flight coroutines are canceled. Tests added. Remote side effects cannot be rolled back (server idempotency required).