chore(deps): bump mcp in the pip group across 1 directory (#150)

Bumps the pip group with 1 update in the / directory: [mcp](https://github.com/modelcontextprotocol/python-sdk).


Updates `mcp` from 1.23.0 to 1.28.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.23.0...v1.28.1)

---
updated-dependencies:
- dependency-name: mcp
  dependency-version: 1.27.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

pyproject.toml

@@ -20,7 +20,7 @@ classifiers = [
 ]
 dependencies = [
     "httpx>=0.26.0",
-    "mcp[cli]==1.23.0",
+    "mcp[cli]==1.28.1",
     # Transitive via mcp; patched floor for CVE-2026-48710 (BadHost), vulnerable in starlette <= 1.0.0.
     "starlette>=1.0.1",
     "python-dotenv>=1.1.0",

requirements.txt

@@ -1,5 +1,5 @@
 httpx>=0.26.0
-mcp[cli]==1.23.0
+mcp[cli]==1.28.1
 # Pulled in transitively by mcp; pin a patched floor for CVE-2026-48710 (BadHost
 # Host-header auth bypass), vulnerable in starlette <= 1.0.0.
 starlette>=1.0.1