♻️ refactor: witness API moves to sandbox/Justfile

MCP server target: just_beam sandbox/Justfile
Dev tooling stays at project root Justfile.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: systemic-engineer