WriteGuard: fine-grained controls for MCP Servers — Blankdot