Proposal: File system permissions for MCP servers running in Docker containers

[Mossaka]

For MCP servers running in docker containers using the container: syntax, we need a way to grant file system access via volume mounting. You should design a new syntax that allows the frontmatter in the markdown to epxress

permissions:
  storage:
      allow:
      - uri: fs://tmp/mcp-filesystem
        access: [read]

The storage will take a list of allowed fs paths and compile them down into volume mounts for docker containers in the GitHub Action YAML files.

[Mossaka]

Duplicated with github/gh-aw-mcpg#275