feat: add pricing sync script and update model prices from OpenRouter (#27)

* fix: pin npm package versions in MCP integration templates

Prevent supply chain attacks by pinning exact versions instead of
using unpinned `npx -y @package` which pulls latest on every run.

23 of 25 integrations pinned. sqlite-mcp and aws skipped (packages
not found on npm registry).

* fix: use stable azure/mcp version instead of beta

* feat: add pricing sync script and update model prices from OpenRouter API

- scripts/sync-pricing.py fetches real-time pricing from OpenRouter
- Updated 64 price fields across 13 provider files
- Run periodically or in CI to keep prices current

providers/xiaomi.toml

@@ -0,0 +1,38 @@
+# xiaomi — auto-generated from OpenRouter API
+
+[provider]
+id = "xiaomi"
+display_name = "Xiaomi"
+api_key_env = "XIAOMI_API_KEY"
+base_url = ""
+key_required = true
+
+[[models]]
+id = "mimo-v2-flash"
+display_name = "Xiaomi: MiMo-V2-Flash"
+tier = "fast"
+context_window = 262144
+max_output_tokens = 65536
+input_cost_per_m = 0.09
+output_cost_per_m = 0.29
+supports_streaming = true
+
+[[models]]
+id = "mimo-v2-omni"
+display_name = "Xiaomi: MiMo-V2-Omni"
+tier = "fast"
+context_window = 262144
+max_output_tokens = 65536
+input_cost_per_m = 0.4
+output_cost_per_m = 2.0
+supports_streaming = true
+
+[[models]]
+id = "mimo-v2-pro"
+display_name = "Xiaomi: MiMo-V2-Pro"
+tier = "smart"
+context_window = 1048576
+max_output_tokens = 131072
+input_cost_per_m = 1.0
+output_cost_per_m = 3.0
+supports_streaming = true