How I rebuilt my blog into an end to end publishing system my AI agent can safely drive: drafts on their own branch, scheduled publishing with no cron, Cloudinary uploads, a gated newsletter, and an MCP server with structural guardrails.