guardian + Stack 01 semgrep/guardian MCP server Claude CodeCodexCursor +2 MCP server "guardian" as configured in semgrep/guardian. Launched with ${CLAUDE_PLUGIN_ROOT}/scripts/hook claude mcp. 12 5d ago A tokens not measured