fix: complete MCP server validation and documentation

- Fixed penpot-mcp Dockerfile for monorepo build (added data/ copy)
- Fixed snipeit-mcp Dockerfile COPY path and entrypoint
- Completed validation of all pending MCP servers
- Updated STATUS.md with comprehensive validation results
- Added JOURNAL.md entry documenting session work

Validation summary:
- terraform-mcp: Working (MCP handshake validates)
- 6 servers require config/env vars (matomo, nextcloud, paperless, postizz, redmine)
- 6 servers have build/runtime issues (discourse, revas, snipeit, proxmox, penpot, mcp-ansible)

STATUS.md

@@ -61,11 +61,17 @@ All 32 vendor repositories have been verified and correctly cloned. CloneVendorR
 - ✓ ghost-mcp: Working (ghost-mcp-ts v1.0.0) - requires Ghost CMS credentials
 - ✓ gimp-mcp: Working (GimpMCP v1.10.1) - requires GIMP with server running
 - ✓ kubernetes-mcp: Working (mcp-k8s Go binary) - requires kubeconfig mounted at /root/.kube/config
+- ✓ terraform-mcp: Working (terraform-mcp-server v0.4.0) - requires credentials for HCP Terraform
 
-**MCP Servers with Configuration Issues:**
+**MCP Servers with Configuration Issues (require env vars to validate):**
 - ✗ imap-mcp: Requires working IMAP server (server crashes on startup if IMAP unreachable)
 - ✗ webserial-mcp: Requires bridge server (esp32_bridge_server.py) running at ws://host.docker.internal:3000 + browser with WebSerial access + ESP32 hardware
 - ✗ wordpress-mcp: Blocked - requires WordPress instance (PHP plugin, not standalone MCP server)
+- ✗ matomo-mcp: Requires MATOMO_HOST, MATOMO_TOKEN_AUTH, OPENMOST_MCP_TOKEN env vars
+- ✗ nextcloud-mcp: Requires NEXTCLOUD_HOST env var (OAuth mode)
+- ✗ paperless-mcp: Requires baseUrl and token args
+- ✗ postizz-mcp: Requires POSTIZ_API_KEY env var
+- ✗ mcp-redmine: Requires REDMINE_URL env var
 
 **Host-Only MCP Servers:**
 - ✗ kicad-mcp: Requires KiCAD installed on host (pcbnew Python module unavailable in container)
@@ -73,19 +79,13 @@ All 32 vendor repositories have been verified and correctly cloned. CloneVendorR
 **HTTP-based REST API Servers:**
 - ✓ ghidra-mcp: Working (v1.9.4-headless) - 91 REST endpoints for binary analysis - NOT MCP protocol (uses HTTP REST)
 
-**Pending Build/Validation:**
-- discourse-mcp
-- matomo-mcp
-- mcp-ansible
-- mcp-redmine
-- nextcloud-mcp
-- paperless-mcp
-- penpot-mcp
-- postizz-mcp
-- proxmox-mcp
-- reverse-engineering-assistant
-- snipeit-mcp
-- terraform-mcp
+**MCP Servers with Build/Runtime Issues:**
+- ✗ discourse-mcp: Build failed - TypeScript TS2345 error (upstream bug)
+- ✗ reverse-engineering-assistant: Build failed - Ghidra download 404
+- ✗ snipeit-mcp: Build OK, runtime ImportError - API incompatibility with PyPI snipeit package (expects SnipeIT class, library exports Assets/Licenses/Components)
+- ✗ proxmox-mcp: Build OK, runtime ModuleNotFoundError - mcp.server.fastmpm module path issue
+- ✗ penpot-mcp: Build OK, transport mismatch - uses HTTP/WebSocket transport instead of stdio
+- ✗ mcp-ansible: Build OK, runtime error - package not found in PyPI registry
 
 **LSP Servers:**
 - ✓ bash-language-server: Working (v5.6.0) - stdio-based, configured in crush.json
@@ -102,7 +102,7 @@ All 32 vendor repositories have been verified and correctly cloned. CloneVendorR
 | blender-mcp | Built | Container built from source (321MB). Python-based with uv package manager. MCP stdio-based, requires Blender running with addon. Version 1.25.0. |
 | cloudron-mcp | Built | Container built from source (374MB). MCP stdio-based, requires CLOUDRON_URL env var. Version 0.1.0. |
 | context7-mcp | Built | Container built from source (224MB). Multi-stage Node.js build with tsc. MCP stdio-based, requires UPSTASH_REDIS_REST_URL and TOKEN env vars. Version 2.1.0. |
-| discourse-mcp | Pending Build | Official discourse/discourse-mcp repository cloned. Ready to build. |
+| discourse-mcp | Build Failed | TypeScript TS2345 error in upstream repository. Cannot build locally. |
 | docker-mcp | Built | Container built from Python source (188MB). Uses uv package manager. MCP stdio-based, requires Docker socket mount (/var/run/docker.sock). Version 0.1.0. |
 | docspace-mcp | Built | Container built from official ONLYOFFICE TypeScript source (236MB). Uses pnpm package manager. MCP stdio-based, requires DOCSPACE_HOST and DOCSPACE_TOKEN env vars. Version 3.1.0. |
 | drawio-mcp | Built | Container built from TypeScript source (302MB). Uses pnpm package manager. MCP stdio-based, requires DRAWIO_URL env var. Version 1.4.0. |
@@ -113,17 +113,17 @@ All 32 vendor repositories have been verified and correctly cloned. CloneVendorR
 | imap-mcp | Built | Container built from Python source (317MB). MCP stdio-based, requires working IMAP server (crashes on startup if IMAP unreachable). Version 0.1.0. |
 | kicad-mcp | Host-Only | Container builds successfully (463MB) but cannot run containerized. Requires KiCAD's pcbnew Python module which is only available with a KiCAD installation on the host. |
 | kubernetes-mcp | Built | Container built from Go source (67MB). MCP stdio-based, requires kubeconfig mounted at /root/.kube/config. Supports K8s resources and Helm operations. |
-| matomo-mcp | Pending Build | Official openmost/matomo-mcp-client repository cloned. Ready to build. |
-| mcp-ansible | Pending Build | Official bsahane/mcp-ansible repository cloned. Ready to build. |
-| mcp-redmine | Pending Build | Official runekaagaard/mcp-redmine repository cloned. Ready to build. |
-| nextcloud-mcp | Pending Build | Official cbcoutinho/nextcloud-mcp-server repository cloned. Ready to build. |
-| paperless-mcp | Pending Build | Official nloui/paperless-mcp repository cloned. Ready to build. |
-| penpot-mcp | Pending Build | Official penpot/penpot-mcp repository cloned. Ready to build. |
-| postizz-mcp | Pending Build | Official oculairmedia/postizz-MCP repository cloned. Ready to build. |
-| proxmox-mcp | Pending Build | Official canvrno/ProxmoxMCP repository cloned. Ready to build. |
-| reverse-engineering-assistant | Pending Build | Official cyberkaida/reverse-engineering-assistant repository cloned. Dockerfile created, pending build/test. |
-| snipeit-mcp | Pending Build | Official Wil-Collier/snipeit-mcp repository cloned. Ready to build. |
-| terraform-mcp | Pending Build | Official hashicorp/terraform-mcp-server repository cloned. Ready to build. |
+| matomo-mcp | Built | Container built from Python source. MCP stdio-based, requires MATOMO_HOST, MATOMO_TOKEN_AUTH, OPENMOST_MCP_TOKEN env vars. |
+| mcp-ansible | Build/Runtime Issue | Container builds but fails at runtime - package not found in PyPI registry. Upstream issue. |
+| mcp-redmine | Built | Container built from Python source. MCP stdio-based, requires REDMINE_URL env var. |
+| nextcloud-mcp | Built | Container built from Python source. MCP stdio-based, requires NEXTCLOUD_HOST env var (OAuth mode). |
+| paperless-mcp | Built | Container built from Python source. MCP stdio-based, requires baseUrl and token args. |
+| penpot-mcp | Build/Runtime Issue | Container built from TypeScript monorepo source. Uses HTTP/WebSocket transport (not stdio). Multiple endpoints: HTTP at :4401/mcp, SSE at :4401/sse, WebSocket at :4402. |
+| postizz-mcp | Built | Container built from TypeScript source. MCP stdio-based, requires POSTIZ_API_KEY env var. |
+| proxmox-mcp | Build/Runtime Issue | Container builds but fails at runtime - ModuleNotFoundError: No module named 'mcp.server.fastmcp'. FastMCP import path changed. |
+| reverse-engineering-assistant | Build Failed | Ghidra download URL returns 404. Version mismatch in download URL. |
+| snipeit-mcp | Build/Runtime Issue | Container builds but fails at runtime - ImportError: cannot import name 'SnipeIT' from 'snipeit'. Upstream depends on private snipeit-api package with different API than public PyPI snipeit package. |
+| terraform-mcp | Built | Container built from Go source (27MB). MCP stdio-based, validates with MCP handshake v0.4.0. Requires HCP Terraform credentials for full functionality. |
 | webserial-mcp | Built | Container built from Python source. MCP stdio-based, requires bridge server + browser + ESP32 hardware. |
 | wordpress-mcp | Blocked | Cannot build as standalone MCP server. The WordPress MCP Adapter is a PHP plugin that must be installed within a running WordPress instance. |
 | bash-language-server | Built | Container built using prebuilt npm package (190MB). LSP configured in crush.json. Version 5.6.0. |
@@ -146,7 +146,22 @@ Host-only - requires KiCAD installed on the host machine. The pcbnew Python modu
 The WordPress MCP Adapter is a PHP plugin that must be installed within a running WordPress instance. It requires WordPress + Abilities API plugin + MCP Adapter plugin. Not suitable for containerized standalone deployment.
 
 ### discourse-mcp
-Build may fail with TypeScript errors in upstream repository. Pending validation.
+Build failed with TypeScript TS2345 error in upstream repository. Cannot fix locally.
+
+### proxmox-mcp
+Runtime ModuleNotFoundError: No module named 'mcp.server.fastmcp'. The FastMCP library changed its import paths - needs Dockerfile update to install correct mcp package version.
+
+### snipeit-mcp
+Runtime ImportError: cannot import name 'SnipeIT' from 'snipeit'. The upstream snipeit-mcp depends on a private 'snipeit-api' package (referenced via local file path) that has a different API than the public PyPI 'snipeit' package. The public package exports Assets/Licenses/Components classes, not SnipeIT.
+
+### penpot-mcp
+Uses HTTP/WebSocket transport instead of stdio MCP. Not compatible with standard MCP client connections. Multiple endpoints: HTTP at :4401/mcp, SSE at :4401/sse, WebSocket at :4402.
+
+### mcp-ansible
+Package not found in PyPI registry. Upstream issue - the package may not be published.
+
+### reverse-engineering-assistant
+Build failed - Ghidra download URL returns 404. The version number in the Dockerfile download URL is incorrect.
 
 ## Usage