Bump tar from 0.4.45 to 0.4.46 in the cargo group across 1 directory

Bumps the cargo group with 1 update in the / directory: [tar](https://github.com/composefs/tar-rs).


Updates `tar` from 0.4.45 to 0.4.46
- [Release notes](https://github.com/composefs/tar-rs/releases)
- [Commits](composefs/tar-rs@0.4.45...0.4.46)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 0.4.46
  dependency-type: indirect
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>

starting new version, after released

Signed-off-by: Avelino <31996+avelino@users.noreply.github.com>

Bump rand from 0.9.2 to 0.9.3

Bumps [rand](https://github.com/rust-random/rand) from 0.9.2 to 0.9.3.
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/0.9.3/CHANGELOG.md)
- [Commits](rust-random/rand@rand_core-0.9.2...0.9.3)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.9.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix code review: env test races, zsh completions, reserved names, aud…

…it logging, OAuth port ordering

Signed-off-by: Avelino <31996+avelino@users.noreply.github.com>

Add community and contributor guidelines

Signed-off-by: Avelino <31996+avelino@users.noreply.github.com>

Add multi-stage Dockerfile and built-in healthcheck

The Dockerfile required a pre-built binary and the compose file
referenced a nonexistent Dockerfile.dev. The health check ran
`mcp serve --help` which always exits 0 regardless of server state.

Replace with a multi-stage build (rust:alpine to scratch) that compiles
from source and produces an 11.8MB image. Add `mcp healthcheck [url]`
subcommand so scratch images can probe /health without external tools.

Fixes: #65
Fixes: #66
Fixes: #73

Signed-off-by: Avelino <31996+avelino@users.noreply.github.com>

Fix review issues on ACL decision audit and CL

Signed-off-by: Avelino <31996+avelino@users.noreply.github.com>

Fix review issues: bidirectional audit toggle, empty path guard, Comp…

…ose escaping

Signed-off-by: Avelino <31996+avelino@users.noreply.github.com>