fix: disable mcp/ast-grep container due to Critical/High CVEs

[Copilot]

mcp/ast-grep:latest has 6 Critical and 38 High CVEs — primarily in Alpine's libcrypto3/libssl3/musl and stdlib@go1.25.1 — with no upstream-patched image currently available.

Changes

• shared/mcp/ast-grep.md — Remove mcp-servers block; replace with security comment (consistent with pattern used for brave.md, notion.md, semgrep.md)
• mcp-inspector.md — Comment out shared/mcp/ast-grep.md import with CVE note
• go-pattern-detector.md — Comment out shared/mcp/ast-grep.md import with CVE note; standalone cargo install ast-grep detection step is unaffected
• Lock files — Recompiled; mcp/ast-grep:latest container reference removed from both affected lock files

• Fixes [container-image-scan] Container findings for mcp/ast-grep:latest #49513