Shift-left GitHub Action: scan committed MCP config files for risky MCP servers before merge. Zero deps, same engine as MCPShield.接入配置该项目没有提供统一的启动命令,请按源码仓库的说明安装。