V3 deterministic file-type inspection capability pack. By-value connector composition (service_kind=cli, no separate ingredient): one local file CLI ingredient exposes bounded read-only type and MIME detection for one trusted local path. The operations return only libmagic metadata on stdout: human-readable type, MIME type, MIME type with encoding, or MIME encoding. They do not return file bytes, recurse directories, read filename lists, use caller-supplied magic databases, inspect compressed contents, read special block/character devices as ordinary data, disable sandboxing, compile magic files, emit debug output, use raw unprintable output, write files, accept stdin, or use a shell wrapper. Editable paths reject flag-like values, URL-like references, and scp-style remotes. Requires file on PATH. Local and no-egress.