MCP Security, .claudeignore, and Graph-Indexed TG

@watchmedropship shared four hardening moves: byte-level scanning + hash-pinning MCP tool metadata against Unicode payloads, a cron determinism scanner (59→2 µ$/item), cautious LLM-as-verifier testing, and click/scrape i…