CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them. Agentic QA boilerplate built on Playwright + KATA + TypeScript.