MCP tool annotations: securing MCP servers against the lethal trifecta | MCPマーケット