Allowlist behavior for managed MCP servers

CHANGELOG · original

Changed allowedMcpServers to govern only servers users add: a literal managed-mcp.json server your allowlist used to filter out now loads on upgrade; use deniedMcpServers to keep it off