Safe-by-default Oracle Database MCP server, in pure Rust — fail-closed SQL guard, engine…