[FEATURE] GAP-007: Batch scan all servers in a single MCP config file

[hello-args]

Summary

Scan every server entry in one MCP JSON without requiring --server per name (GAP-007).

Problem

GAP-007 is Missing (P0). Today:

mcts scan --config file.json --server X   # one server at a time

Partial overlap (validated 2026-06-17): after #87 / PR #279:

mcts inventory --config-path file.json --scan-all -o inventory-scan-all.json

inventories all servers in one file and runs a full scan per entry — but via inventory UX, exit codes, and JSON schema (inventory-scan-all.json), not mcts scan output.

Expected Behavior

mcts scan --config file.json (or explicit --batch / all-servers flag) runs the full mcts scan analyzer suite across every mcpServers key with scan-native reporting and gates.

References

• GAP-007 — feature expansion plan
• [SECURITY] mcts inventory reads local MCP configs without consent gate #87 — inventory --config-path + --scan-all partial overlap
• PR feat(inventory): add privacy controls for config discovery (#87) #279

Acceptance Criteria

• CLI entry point on mcts scan for all servers in one config
• Exit codes aligned with fleet gates (same as --machine-wide / inventory scan-all)
• Documented distinction vs mcts inventory --scan-all