* chore: add issue templates

* chore: add pull request template

* fix: typo

* chore: add a security policy

* fix: simplify

Link README's `contributing` to CONTRIBUTING.md.  Previous links where
to now-moved sections within README.

…itialized yet (#289)

AddSessionTools and DeleteSessionTools can be called before the session
is registered, in particular in the RegisterSession hook.

They should not attempt to send `notifications/tools/list_changed`
notifications in this case as it will only generate errors.

When users add tools via AddTool or AddSessionTool, implicitly set the
tools capability.  If the user has not already called
WithToolCapabilities, then default listChanged to true, but honor any
existing value.

This mimics the behavior of the official typescript sdk, which registers
`tools.listChanged: true` when the user adds a tool to the MCP server.

Servers may report their [tools.listChanged][] capability as false, in
which case they indicate that they will not send notifications when
available tools change.

Honor the spec by not sending notifications/tools/list_changed
notifications when capabilities.tools.listChanged is false.

[tools.listChanged]: https://modelcontextprotocol.io/specification/2025-03-26/server/tools#capabilities

* fix: type mismatch for request/response ID

* fix: make suggested changes

* feat(MCPServer): support logging/setlevel request

* update template file and adopt coderabbitai suggestion