Fix Cursor stdio initialization and tool discovery. Add Windows configuration guidance, MCP transport tests, and security regression coverage.