feat: add reusable roots enforcement utilities to MCPServer #1833

Job	Run time
checks / readme-snippets	12s
checks / pre-commit	35s
checks / test (3.10, lowest-direct, windows-latest)	2m 42s
checks / test (3.11, locked, ubuntu-latest)	53s
checks / test (3.10, locked, ubuntu-latest)	55s
checks / test (3.11, lowest-direct, windows-latest)	2m 47s
checks / test (3.10, lowest-direct, ubuntu-latest)	54s
checks / test (3.10, locked, windows-latest)	2m 35s
checks / test (3.11, lowest-direct, ubuntu-latest)	1m 1s
checks / test (3.12, lowest-direct, windows-latest)	3m 27s
checks / test (3.11, locked, windows-latest)	2m 48s
checks / test (3.12, lowest-direct, ubuntu-latest)	1m 0s
checks / test (3.12, locked, ubuntu-latest)	53s
checks / test (3.12, locked, windows-latest)	3m 16s
checks / test (3.14, locked, ubuntu-latest)	2m 28s
checks / test (3.13, lowest-direct, ubuntu-latest)	52s
checks / test (3.14, lowest-direct, windows-latest)	3m 1s
checks / test (3.14, lowest-direct, ubuntu-latest)	1m 18s
checks / test (3.13, locked, ubuntu-latest)	49s
checks / test (3.13, locked, windows-latest)	2m 28s
checks / test (3.14, locked, windows-latest)	2m 59s
checks / test (3.13, lowest-direct, windows-latest)	2m 51s
all-green	4s
	40m 48s

Provide feedback