refactor(@angular/cli): integrate MCP roots into Host abstraction

[clydin]

Update the Host abstraction to be aware of allowed roots provided by the MCP client. A new createRootRestrictedHost wrapper enforces that file operations and command executions stay within these roots. The server is updated to initialize roots on connection and listen for changes.

[gemini-code-assist]

Code Review

This pull request implements path restriction for the MCP host by introducing a createRootRestrictedHost wrapper and updating the Host interface with a setRoots method. The MCP server now dynamically manages these roots based on client capabilities and notifications. Review feedback suggests enhancing the security of the path validation logic to prevent bypasses via glob patterns or command paths and recommends refactoring the server initialization to use an async handler instead of an IIFE.

[dgp1130]

This PR was merged into the repository. The changes were merged into the following branches:

• main: 443dc3a
• 21.2.x: 7130c92

[angular-automatic-lock-bot]

This pull request has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

_{This action has been performed automatically by a bot.}