API capability pack for bounded dbt Cloud Administrative API operations against https://cloud.getdbt.com only. Enroll a dbt Cloud API token connection named dbt-cloud that injects Authorization: Token <token> or an equivalent bearer header; no credential is embedded in this manifest. The pack reads accounts, projects, environments, jobs, runs, run steps, and run artifacts, and supports approval-gated triggering of one job run and cancellation of one run. It bundles a run-health brief, run-artifact brief, guarded job trigger, and guarded run cancel workflow. The pack intentionally excludes project, environment, job, connection, credential, group, user, invite, SCIM, service-token, webhook, audit-log export, semantic-layer, Discovery API, regional/private-host switching, retry/rerun routes, arbitrary artifact paths outside documented run artifacts, and arbitrary dbt API passthrough.