Add comprehensive section covering: - enabledMcpjsonServers for server-level auto-approval - enableAllProjectMcpServers for project-level trust - Security trade-offs and recommendations - Limitation: no per-tool approval granularity Closes bd-59 Amp-Thread-ID: https://ampcode.com/threads/T-39fad2a0-46a9-410e-a74d-7db2b16c488d Co-authored-by: Amp <amp@ampcode.com>