fix(deps): bump @modelcontextprotocol/sdk to 1.25.2 (CVE-2026-0621 ReDoS) (#140)

@modelcontextprotocol/sdk < 1.25.2 contains a ReDoS vulnerability in the
UriTemplate class (partToRegExp generates nested quantifiers that can cause
catastrophic backtracking on crafted resources/read URIs). Bump to the
patched 1.25.2.

Fixes #124
Fixes #114

Author: gaojude

package.json

@@ -33,7 +33,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "1.24.3",
+    "@modelcontextprotocol/sdk": "1.25.2",
     "find-process": "2.0.0",
     "pid-port": "2.0.0",
     "undici": "^7.18.2",