Phase 3: MCP HTTP clients + Dockerization

Wrapper async tipizzati sui sei servizi MCP HTTP che Cerbero Bite
consuma in autonomia. 277 test pass, copertura clients 93%, mypy
strict pulito, ruff clean.

Base layer:
- clients/_base.py: HttpToolClient con httpx + tenacity (retry
  esponenziale 3x, timeout 8s, mapping HTTP→eccezioni tipizzate).
- clients/_exceptions.py: McpAuthError, McpServerError, McpToolError,
  McpDataAnomalyError, McpNotFoundError, McpTimeoutError.
- config/mcp_endpoints.py: risoluzione URL via Docker DNS
  (mcp-deribit:9011, ...) con override per servizio via env var;
  caricamento bearer token da secrets/core.token o
  CERBERO_BITE_CORE_TOKEN_FILE.

Wrapper:
- clients/macro.py: next_high_severity_within() per filtro entry §2.5.
- clients/sentiment.py: funding_cross_median_annualized() con
  annualizzazione per period nativo per exchange (Binance/Bybit/OKX
  1095, Hyperliquid 8760).
- clients/hyperliquid.py: funding_rate_annualized() per filtro §2.6.
- clients/portfolio.py: total_equity_eur(), asset_pct_of_portfolio()
  per sizing engine + filtro §2.7.
- clients/telegram.py: notify-only (no callback queue, no
  conferme — Bite auto-execute).
- clients/deribit.py: environment_info, index_price_eth,
  latest_dvol, options_chain, get_tickers, orderbook_depth_top3,
  get_account_summary, get_positions, place_combo_order (combo
  atomico), cancel_order.

CLI:
- cerbero-bite ping: health-check parallelo di tutti gli MCP con
  tabella rich (OK/FAIL/SKIPPED).

Docker:
- Dockerfile multi-stage Python 3.13 + uv, user non-root.
- docker-compose.yml con rete external "cerbero-suite", secret
  core_token montato a /run/secrets/core_token, env per ogni MCP.
- secrets/README.md documenta il setup del token.

Documentazione di intervento:
- docs/12-mcp-deribit-changes.md: spec delle modifiche apportate
  al server mcp-deribit (place_combo_order + override testnet via
  DERIBIT_TESTNET).

Dipendenze:
- aggiunto pytest-httpx per i test HTTP.
- rimosso mcp>=1.0 (non usiamo l'SDK MCP, parliamo via HTTP REST).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

tests/unit/test_clients_portfolio.py

@@ -0,0 +1,95 @@
+"""Tests for PortfolioClient."""
+
+from __future__ import annotations
+
+from decimal import Decimal
+
+import pytest
+from pytest_httpx import HTTPXMock
+
+from cerbero_bite.clients._base import HttpToolClient
+from cerbero_bite.clients._exceptions import McpDataAnomalyError
+from cerbero_bite.clients.portfolio import PortfolioClient
+
+
+def _client() -> PortfolioClient:
+    http = HttpToolClient(
+        service="portfolio",
+        base_url="http://mcp-portfolio:9018",
+        token="t",
+        retry_max=1,
+    )
+    return PortfolioClient(http)
+
+
+@pytest.mark.asyncio
+async def test_total_equity_eur(httpx_mock: HTTPXMock) -> None:
+    httpx_mock.add_response(
+        url="http://mcp-portfolio:9018/tools/get_total_portfolio_value",
+        json={"total_value_eur": 12345.67},
+    )
+    out = await _client().total_equity_eur()
+    assert out == Decimal("12345.67")
+
+
+@pytest.mark.asyncio
+async def test_total_equity_anomaly_when_missing(httpx_mock: HTTPXMock) -> None:
+    httpx_mock.add_response(json={})
+    with pytest.raises(McpDataAnomalyError, match="total_value_eur"):
+        await _client().total_equity_eur()
+
+
+@pytest.mark.asyncio
+async def test_total_equity_anomaly_on_unexpected_shape(httpx_mock: HTTPXMock) -> None:
+    httpx_mock.add_response(json=[1, 2, 3])
+    with pytest.raises(McpDataAnomalyError, match="unexpected shape"):
+        await _client().total_equity_eur()
+
+
+@pytest.mark.asyncio
+async def test_asset_pct_aggregates_matching_tickers(httpx_mock: HTTPXMock) -> None:
+    httpx_mock.add_response(
+        url="http://mcp-portfolio:9018/tools/get_holdings",
+        json=[
+            {"ticker": "ETH-USD", "current_value_eur": 3000.0},
+            {"ticker": "ETHE", "current_value_eur": 1000.0},  # ETH ticker variant
+            {"ticker": "AAPL", "current_value_eur": 6000.0},
+        ],
+    )
+    pct = await _client().asset_pct_of_portfolio("ETH")
+    # 4000 / 10000 = 0.4
+    assert pct == Decimal("0.4")
+
+
+@pytest.mark.asyncio
+async def test_asset_pct_returns_zero_for_empty_portfolio(
+    httpx_mock: HTTPXMock,
+) -> None:
+    httpx_mock.add_response(json=[])
+    assert await _client().asset_pct_of_portfolio("ETH") == Decimal("0")
+
+
+@pytest.mark.asyncio
+async def test_asset_pct_skips_entries_without_value(httpx_mock: HTTPXMock) -> None:
+    httpx_mock.add_response(
+        json=[
+            {"ticker": "ETH", "current_value_eur": None},
+            {"ticker": "AAPL", "current_value_eur": 1000.0},
+        ]
+    )
+    assert await _client().asset_pct_of_portfolio("ETH") == Decimal("0")
+
+
+@pytest.mark.asyncio
+async def test_asset_pct_anomaly_when_response_not_list(httpx_mock: HTTPXMock) -> None:
+    httpx_mock.add_response(json={"holdings": []})
+    with pytest.raises(McpDataAnomalyError, match="unexpected shape"):
+        await _client().asset_pct_of_portfolio("ETH")
+
+
+def test_portfolio_client_rejects_wrong_service() -> None:
+    bad = HttpToolClient(
+        service="macro", base_url="http://x:1", token="t", retry_max=1
+    )
+    with pytest.raises(ValueError, match="requires service 'portfolio'"):
+        PortfolioClient(bad)