Allow list for MCP launching #1822
Description
MCPs may have been setup with a deep link, or by hand for extensions.
It would be nice to have a GOOSE_MCP_ALLOWLIST to be able to lock down what ones are allowed (optionally).
This can be enforced in mcp client end of goose, and also any UI that is configuring it.
Ideally this list could be dynamic so you don't have to re-distribute goose binary/app.
WIP: #1821