feat: add reusable roots enforcement utilities to MCPServer #1832

Job	Run time
checks / pre-commit	39s
checks / readme-snippets	14s
checks / test (3.12, lowest-direct, ubuntu-latest)	1m 0s
checks / test (3.10, locked, windows-latest)	2m 22s
checks / test (3.11, locked, ubuntu-latest)	55s
checks / test (3.13, lowest-direct, ubuntu-latest)	52s
checks / test (3.12, locked, windows-latest)	3m 42s
checks / test (3.12, lowest-direct, windows-latest)	3m 31s
checks / test (3.10, lowest-direct, ubuntu-latest)	55s
checks / test (3.11, lowest-direct, windows-latest)	3m 20s
checks / test (3.13, locked, ubuntu-latest)	52s
checks / test (3.10, locked, ubuntu-latest)	56s
checks / test (3.13, lowest-direct, windows-latest)	2m 45s
checks / test (3.10, lowest-direct, windows-latest)	2m 40s
checks / test (3.14, lowest-direct, ubuntu-latest)	1m 21s
checks / test (3.12, locked, ubuntu-latest)	58s
checks / test (3.14, locked, ubuntu-latest)	2m 25s
checks / test (3.11, locked, windows-latest)	3m 19s
checks / test (3.14, locked, windows-latest)	4m 6s
checks / test (3.13, locked, windows-latest)	2m 29s
checks / test (3.11, lowest-direct, ubuntu-latest)	53s
checks / test (3.14, lowest-direct, windows-latest)	2m 17s
all-green	5s
	42m 36s

Provide feedback