MCP Safety Lint

Lints MCP tool definitions for prompt-injection wording and hidden Unicode, and estimates their context cost. Offline, stdio, no dependencies.