chore: add streamable http disclaimer

[blva]

Proposed changes

• Adds streamable http disclaimer

Checklist

• I have signed the MongoDB CLA

[Copilot]

Pull Request Overview

This PR adds a security disclaimer and best practices guidance for the HTTP transport feature in the MongoDB MCP Server. The change aims to warn users about security considerations when using the streamable HTTP transport option.

• Adds a prominent security warning about HTTP transport risks
• Provides specific security measure recommendations for production deployments
• References official documentation for additional security considerations

[Copilot]

[nitpick] The term 'Streamable HTTP transport' should be consistently capitalized. Consider using 'streamable HTTP transport' (lowercase 's') to match standard technical writing conventions unless this is a proper noun or brand name.

Suggested change

	> **⚠️ Security Notice:** This server now supports Streamable HTTP transport for remote connections. **HTTP transport is NOT recommended for production use without implementing proper authentication and security measures.**
	> **⚠️ Security Notice:** This server now supports streamable HTTP transport for remote connections. **HTTP transport is NOT recommended for production use without implementing proper authentication and security measures.**

[coveralls]

Pull Request Test Coverage Report for Build 16449772986

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage increased (+0.3%) to 80.495%

---

Totals
Change from base Build 16448284562:	0.3%
Covered Lines:	3110
Relevant Lines:	3826

---

💛 - Coveralls