Security audit report

@heilgar/shadcn-ui-mcp-server is NOT recommended for integration: the scan surfaced 0 critical and 19 high-severity findings. Treat the Per-Scanner Detail section as a remediation worklist and re-scan before reconsidering.