Security: upgraded @modelcontextprotocol/sdk to 1.32.2 (DNS rebinding, ReDoS and cross-client data leak advisories).
Security: replaced the firecrawl-mcp 3.3.6 package (pinned to MCP SDK 1.18.0, cannot run on the patched SDK) with a bundled server.js on MCP SDK 1.32.2. Same six tools, input schemas and output.