security: restrict upload_attachment file access to upload root#112

paradoxbound wants to merge 1 commit intomainparadoxbound/bookstack-mcp:mainfrom

paradoxbound/upload-root-securityparadoxbound/bookstack-mcp:paradoxbound/upload-root-securityCopy head branch name to clipboard