filter_trusted_project_servers(
servers: Mapping[str, Any],
trust_lists: McpServerTrustLists,
*,
project_root:Return only the project servers that survive the user's trust policy.
The single place the per-server trust rule lives, shared by the runtime
tool loader and the mcp login resolver so reject-precedence cannot drift
between them: a disabled name is dropped even from a config_trusted
config; otherwise a server is kept when the whole config is trusted or the
user's scoped approvals / env allowlist enable it (is_enabled).
Whether the config as a whole is trusted (e.g.
--trust-project-mcp). Defaults to False.