update security instructions, remove unused debug tool

mcp/debug.ts

@@ -1,23 +0,0 @@
-import { type } from "arktype";
-import type { ToolContext } from "./server.ts";
-import { $ } from "../utils/shell.ts";
-import { execute, tool } from "./shared.ts";
-
-export const DebugShellCommand = type({});
-
-export function DebugShellCommandTool(_ctx: ToolContext) {
-  return tool({
-    name: "debug_shell_command",
-    description:
-      "debug tool: runs 'git status' and returns the output. use this to test shell command execution in the MCP server.",
-    parameters: DebugShellCommand,
-    execute: execute(async () => {
-      const result = $("git", ["status"]);
-      return {
-        success: true,
-        command: "git status",
-        output: result.trim(),
-      };
-    }),
-  });
-}

mcp/server.ts

@@ -77,7 +77,7 @@ import {
   ReplyToReviewCommentTool,
   ReportProgressTool,
 } from "./comment.ts";
-import { DebugShellCommandTool } from "./debug.ts";
+import { CommitInfoTool } from "./commitInfo.ts";
 import {
   AwaitDependencyInstallationTool,
   StartDependencyInstallationTool,
@@ -89,7 +89,6 @@ import { GetIssueEventsTool } from "./issueEvents.ts";
 import { IssueInfoTool } from "./issueInfo.ts";
 import { AddLabelsTool } from "./labels.ts";
 import { CreatePullRequestTool } from "./pr.ts";
-import { CommitInfoTool } from "./commitInfo.ts";
 import { PullRequestInfoTool } from "./prInfo.ts";
 import { CreatePullRequestReviewTool } from "./review.ts";
 import { GetReviewCommentsTool, ListPullRequestReviewsTool } from "./reviewComments.ts";
@@ -177,7 +176,6 @@ export async function startMcpHttpServer(
     GetReviewCommentsTool(ctx),
     ListPullRequestReviewsTool(ctx),
     GetCheckSuiteLogsTool(ctx),
-    DebugShellCommandTool(ctx),
     AddLabelsTool(ctx),
     CreateBranchTool(ctx),
     CommitFilesTool(ctx),