discover: extend shadow-AI sweep to MCP servers and provider keys (#245)