Intentionally-vulnerable MCP server — a live demo target for the MCP Trust scanner (GitHub Action). Do not run.