🔮 MCP security scanner — find tool poisoning, credential leaks, and insecure transports in AI agent configurations