Return (name, kind, summary) for every server in a project config.
Used by the trust prompt and the untrusted-config skip warning so that
both stdio servers (which spawn local commands) and remote servers
(which can SSRF or exfiltrate environment variables via interpolated
headers when an attacker controls .mcp.json) are gated identically.
Parsed MCP config dictionary.
