fix(mcp): preserve target provenance on retained partial errors

src/server/contractToolHandler.ts

@@ -70,6 +70,7 @@ export const createEvidenceToolHandler =
                 result.error,
                 partial.evidence_id,
                 recorded,
+                contract.returnsTargetContent,
               );
           }
           return server.delivery.toCallToolResult(result, contract);

tests/boundary/mcp/packetCaptureMcp.test.ts

@@ -90,6 +90,9 @@ it.each(["cancelled", "cleanup"])(
       arguments: input,
     });
     expect(response.isError).toBe(true);
+    expect(response._meta).toEqual({
+      provenance: { untrusted_content: true, source: "analysis_target" },
+    });
     expect(parseMcpToolError(response)).toMatchObject({
       error: {
         details: {