fix: prevent Agreement.uri from overriding resource URI

[Thomas-Sedhom]

Replaces #129 (closed by stale bot)

Problem

In getAgreements, the object spread ...a was placed after the explicitly defined uri field. Since Agreement has its own uri property, it was silently overwriting the apap://agreements/${a.id} URI we were trying to set — meaning MCP clients were getting the wrong URI back.

Solution

Moved ...a to the top of the returned object so that our explicit uri, mimeType, and text fields always take precedence over whatever's on the schema.

// before
return {
    uri: `apap://agreements/${a.id}`,   // overridden by ...a
    mimeType: "application/json",
    text: JSON.stringify({ ...a.data, $identifier: a.id }, null, 2),
    ...a
}

// after
return {
    ...a,
    uri: `apap://agreements/${a.id}`, 
    mimeType: "application/json",
    text: JSON.stringify({ ...a.data, $identifier: a.id }, null, 2),
}

And it finally return the correct URI:

Fixes: #128