chore(mcp): drop 24 narrow tools from user-facing MCP surface (#142) #160

Job	Run time
Trivy (filesystem + container scan)	10s
Semgrep (SAST)	23s
OSV-Scanner (SCA)	5s
jscpd (duplication < 3% on touched code)	20s
Gitleaks (secret scan)	11s
SBOM (SPDX + CycloneDX)	17s
	1m 26s

Provide feedback