fix: adding mcp-scan cli extension

[aarlaud]

Pull Request Submission Checklist

• Follows CONTRIBUTING guidelines
• Commit messages
  are release-note ready, emphasizing
  what was changed, not how.
• Includes detailed description of changes
• Contains risk assessment (Low | Medium | High)
• Highlights breaking API changes (if applicable)
• Links to automated tests covering new functionality
• Includes manual testing instructions (if necessary)
• Updates relevant GitBook documentation (PR link: ___)
• Includes product update to be announced in the next stable release notes

What does this PR do?

Adds experimental mcp-scan command via dedicated cli extension.

Where should the reviewer start?

https://github.com/snyk/cli-extension-mcp-scan

How should this be manually tested?

mcp-scan --experimental

What's the product update that needs to be communicated to CLI users?

mcp-scan as part of evo.

Risk assessment (Low | Medium | High)?

Low

[aarlaud]

depends on snyk/go-application-framework#491

[github-actions]

	Warnings
⚠️	There are multiple commits on your branch, please squash them locally before merging!

Generated by 🚫 dangerJS against 0e74856