[divyanshujethi]

Summary of Changes

Remediates all CodeQL SAST security alerts detected on initial repository scan:

1. Refactored GraphQL & Protobuf Parsers (src/proto-graphql.ts):
   • Converted multiline greedy regexes into single-pass line-by-line streaming parsers, fully eliminating polynomial ReDoS vulnerabilities (Alerts #34-#41).
2. Hardened OpenAPI Path & Name Normalizers (src/openapi.ts, src/devshelf-export.ts):
   • Swapped unbounded regexes with strict alphanumeric path extraction and safe string trimming (Alerts #33, #42).
3. Python Template Sanitization (src/templates/python.ts):
   • Fixed incomplete sanitization by escaping backslashes before double quotes in pyproject.toml descriptions (Alert #44).
   • Replaced leading/trailing underscore regex with linear trimming (Alert #43).
4. CodeQL Scoping (.github/codeql/codeql-config.yml):
   • Explicitly configured CodeQL to target production source files (src/) while excluding unit test suites ( ests/).

[github-actions]

👋 Thanks for opening this Pull Request, @divyanshujethi!

Thank you for contributing to MCP Builder Kit! ⚡

Here is what happens next:

1. 🧪 Automated CI Tests: Our workflow is verifying build pipelines and TypeScript types.
2. 🔍 Code Review: A maintainer from @RitualDev-Lab will review your changes shortly.
3. 🌟 Contributor Recognition: Once merged, you'll be featured on our contributors list!

💡 Tip: Make sure your commits follow Conventional Commits and tests pass locally (pnpm test).