feat(rules): remote MCP, OAuth, stdio bridge, and auto-approve rules (#144)

Adds src/rules/mcp-remote.ts with 16 rules and a cross-harness MCP server iterator covering header and URL secrets, plaintext transports, private ranges, OAuth secrets and scopes, headers helpers, stdio bridges, shell commands, env proxies, mirrored host secrets, auto-approve wildcards, tool-description injection, tool shadowing, and unpinned docker images. 57 new tests.

Author: affaan-m

src/rules/index.ts

@@ -5,6 +5,7 @@ import { hookRules } from "./hooks.js";
 import { mcpRules } from "./mcp.js";
 import { cveMcpRules } from "./mcp-cve.js";
 import { toolPoisoningRules } from "./mcp-tool-poisoning.js";
+import { mcpRemoteRules } from "./mcp-remote.js";
 import { packageManagerRules } from "./package-manager.js";
 import { agentRules } from "./agents.js";
 import { skillRules } from "./skills.js";
@@ -28,6 +29,7 @@ export function getBuiltinRules(): ReadonlyArray<Rule> {
     ...mcpRules,
     ...cveMcpRules,
     ...toolPoisoningRules,
+    ...mcpRemoteRules,
     ...packageManagerRules,
     ...skillRules,
     ...agentRules,