README: Oracle is live behind providers_search and tools_install

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FAqjv1sLfUad2bMcsmPbRT

README.md

@@ -30,7 +30,7 @@ Connect once to `my.phast.app/mcp` → create/manage `user.phast.app` → search
 ## Boundaries
 
 - **Phast app composes.** It owns the portable MCP/tool belt and Prefab composition.
-- **Oracle discovers.** Provider/MCP/OAuth discovery comes from the capability graph, not a hard-coded Phast app directory.
+- **Oracle discovers.** Provider/MCP/OAuth discovery comes from the capability graph, not a hard-coded Phast app directory. Live since 2026-10-28: `providers_search` reads `https://oracle.teahub.xyz/search.json` (`ORACLE_URL`, cached `ORACLE_TTL_SECONDS`, default an hour, last good copy on the volume) and `tools_install` puts a capability on the belt by its Oracle id, carrying its evidence state. Teahub's own services are in Oracle through its overlay (`teahubxyz/oracle` `oracle/overlay.json`).
 - **Persimmons holds secrets.** Phast app stores connection/authority references, not secret values.
 - **Factory builds/operates.** Provisioning uses bounded deterministic infrastructure routes.
 - **Clients are replaceable.** ChatGPT, Claude, Codex, or another MCP client should be able to use the same Phast app without recollecting the user's tools.