mcpvessel run untrusted MCP servers caged, egress denied by default

Write your take first — we'll ask for email only when you're ready to publish.