feat(poc): rewind MCP, skill, and recover-ladder docs

Initial PoC: find_protection, tagged checkpoints, FLR, mutating catalog.
Lab 10.9 status enums (0=Initializing, 1=MeetingSLA). Credentials stay in gitignored config.json.

README.md

@@ -0,0 +1,74 @@
+# zerto-ai-rewind
+
+PoC MCP that makes an agent pin a Zerto tagged checkpoint before it changes a VM, then pull a file back from that tag.
+
+If the loop works, these tools are the delta to add to official ZVM MCP (`ZVM.MCP`, 10.9). This repo is one MCP process for the demo. It is not a second full ZVM catalog.
+
+## What it does
+
+1. `zerto_find_protection` — VM name, hostname, or vmIdentifier to exactly one VM and every VPG. Zero or two-plus VMs: stop.
+2. `zerto_create_tagged_checkpoint` / `zerto_guard_before_mutate` — same tag on every protecting VPG, wait until listed.
+3. `zerto_recover_file` — FLR after a human sets `confirmed=true`.
+4. Mutating catalog — opt-in list of MCP tools that must be guarded. Unlisted tools pass through. Users add entries.
+
+Official ZVM MCP already has inventory and failover test. It does not insert tagged checkpoints or run FLR.
+
+## Setup
+
+Python 3.12+.
+
+```bash
+python3 -m venv .venv
+source .venv/bin/activate
+pip install -e ".[dev]"
+cp config.example.json config.json
+# edit zerto_url, username, password
+```
+
+Keycloak password-grant, client_id `zerto-client` on 10.x. Appliance certs are self-signed; `verify_tls` defaults to false.
+
+stdio MCP (Claude Desktop, VS Code, Cursor, OpenCode):
+
+```json
+{
+  "mcpServers": {
+    "zerto-rewind": {
+      "command": "zerto-rewind-mcp",
+      "env": {
+        "ZERTO_REWIND_CONFIG": "/absolute/path/to/config.json"
+      }
+    }
+  }
+}
+```
+
+Copy `skills/zerto-rewind/SKILL.md` into the client's skill path.
+
+```bash
+pytest
+```
+
+## Demo
+
+Protected app VM. Agent is about to edit a guest config file.
+
+1. Guard: discover VPG set, insert tagged checkpoint, wait.
+2. Agent writes the bad config.
+3. Human confirms.
+4. `zerto_recover_file` from that tag.
+
+Git never had the file. RPO is the journal, not last night's backup.
+
+## Certified for this PoC
+
+vSphere ZVM 10.x and ZCA on AWS/Azure, same REST paths. HVM is out (separate swagger). Failover Live is not a tool.
+
+Tagged checkpoints cannot be inserted when the **protected** site is Azure or AWS (Zerto API). Point this server at the vSphere protected ZVM.
+
+## Not this product
+
+[Moholo Agent Rewind](https://github.com/moholo-founder/agent-rewind) snapshots the agent's laptop tools. This server uses the Zerto journal as the snapshot store. Do not copy their file blobs.
+
+## Upstream
+
+Ask Zerto engineering to add to `ZVM.MCP`: find-by-unique-VM-with-all-VPGs, tagged checkpoint insert that waits, FLR. Keep VPG settings CRUD where it already is.