Where the Claude sandbox is enabled, permit network access to
mcp.context7.com only, and validate that exact shape.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Add a shell-specific permission for `mcporter call context7.*` so Claude can
query Context7 through MCPorter without a permission prompt.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>