Simplify Athena operator maintenance workflow

platform/mcp/athena_operator_mcp.py

@@ -63,7 +63,9 @@ TOOLS = [
             "and SSH to configured remote systems. Prefer a single focused command and cap noisy output "
             "with the command itself. The server blocks power control and changes to Athena's SSH, LAN, "
             "WireGuard, firewall, boot, kernel, mounts and partitions so remote reachability cannot be "
-            "accidentally destroyed. Other commands execute immediately and must be verified afterwards."
+            "accidentally destroyed. Other commands execute immediately and must be verified afterwards. "
+            "Do not clone the canonical repository, request/copy an SSH key, or use Terminal as a substitute "
+            "for the durable file_update, git_publish and recovery workflow."
         ),
         "inputSchema": {
             "type": "object",
@@ -84,12 +86,14 @@ TOOLS = [
             "content-bound ticket, exact preview and confirmation phrase. Supported operations: "
             "file_update (write repository and deployed stack files), run_checks, compose_deploy, "
             "container_action, openwebui_sync, git_publish, model_download, benchmark, recovery. Show the complete "
-            "preview to the user and stop. Never execute in the same autonomous tool sequence. "
+            "preview to the user and stop. Never execute in the same autonomous tool sequence. This is the "
+            "supported durable source and Git path: never clone the repository inside a sandbox and never "
+            "request or copy an SSH key. "
             "file_update payload: {files:[{path,content,expected_sha256?}]}; run_checks: "
             "{checks:[operator-tests,openwebui-filter-tests,platform-verify,compose-main,compose-mcp]}; "
             "compose_deploy: {compose_file,services,build}; container_action: {action,containers}; "
             "openwebui_sync: {}; "
-            "git_publish: {message}; model_download: {url,destination,sha256?}; benchmark: "
+            "git_publish: {message,paths:[exact changed repository paths]}; model_download: {url,destination,sha256?}; benchmark: "
             "{script,arguments}; recovery: {label}."
         ),
         "inputSchema": {