MCP server that provides deterministic remediation plans from vulnerability scan data (Trivy, Grype, Sysdig) via tools to generate plans from scan content or fetch live from Sysdig API, enabling AI agents to produce concrete, distro-aware fix commands.