[FEATURE] GAP-030: Per-server y/n consent for live stdio launches

[hello-args]

Summary

Interactive per-server confirmation before launching each stdio MCP server during live/fuzz/inventory --scan paths.

Problem

GAP-030 is Partial in the feature expansion plan. Fleet or multi-server live runs use a single global consent flag today.

Expected Behavior

Prompt y/n per server (or documented fleet policy) before subprocess launch.

Acceptance Criteria

• Per-server prompt or documented bypass for CI
• Tests for accept/deny paths