Security audit MCP server: finds code, dependency, exposure, secrets, and active-compromise gaps across any stack