fix(skill-loader): propagate scope to MCP connections

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

src/features/skill-mcp-manager/connection.ts

@@ -38,7 +38,8 @@ export async function getOrCreateClient(params: {
     return pending
   }
 
-  const expandedConfig = expandEnvVarsInObject(config, { trusted: true })
+  const isTrusted = info.scope !== "project"
+  const expandedConfig = expandEnvVarsInObject(config, { trusted: isTrusted })
   let currentConnectionPromise!: Promise<Client>
   state.inFlightConnections.set(info.sessionID, (state.inFlightConnections.get(info.sessionID) ?? 0) + 1)
   currentConnectionPromise = (async () => {

src/tools/skill-mcp/tools.ts

@@ -166,6 +166,7 @@ export function createSkillMcpTool(options: SkillMcpToolOptions): ToolDefinition
         serverName: args.mcp_name,
         skillName: found.skill.name,
         sessionID,
+        scope: found.skill.scope,
       }
 
       const context: SkillMcpServerContext = {