refactor(policy): align mcp deny rules #2197

Job	Run time
Resolve PR metadata	7s
build-gateway / Resolve build plan	2s
build-supervisor / Resolve build plan	2s
build-supervisor / Rust sandbox (amd64) / sandbox (amd64)	3m 23s
build-supervisor / Rust sandbox (arm64) / sandbox (arm64)	3m 50s
build-gateway / Rust gateway (amd64) / gateway (amd64)	7m 13s
build-gateway / Rust gateway (arm64) / gateway (arm64)	16m 4s
build-supervisor / Build supervisor (arm64)	2m 6s
build-supervisor / Build supervisor (amd64)	1m 25s
build-supervisor / Merge supervisor manifest	1m 6s
gpu-e2e	-1s
GPU E2E result	-1s
build-gateway / Build gateway (amd64)	1m 33s
build-gateway / Build gateway (arm64)	1m 30s
build-gateway / Merge gateway manifest	1m 4s
e2e / E2E (rust-podman-rootless)	10m 0s
e2e / E2E (mcp)	7m 31s
kubernetes-e2e / Kubernetes E2E (Rust smoke)	9m 42s
e2e / E2E (rust-docker)	6m 57s
e2e / E2E (rust-podman)	7m 53s
e2e / E2E (python)	7m 1s
kubernetes-ha-e2e	0s
Kubernetes HA E2E result	-1s
Core E2E result	4s
	1h 28m 30s

Provide feedback