fix(security): backport MCP stdio component policy (#14710)

* fix(security): enforce MCP stdio policy in components

* [autofix.ci] apply automated fixes

* fix(security): revalidate cached MCP stdio tools

* [autofix.ci] apply automated fixes

* test: use valid tenant UUID for MCP cache

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>