MCP server that vets package installations and shell commands to block dangerous actions by AI coding agents.