fix: ship discover-and-add-mcps as builtin skill

Toast suggests `/discover-and-add-mcps` but the command only existed as a
project-level `.opencode/command/` file not shipped with the package. Convert
to a builtin skill at `.opencode/skills/discover-and-add-mcps/SKILL.md` so
it is embedded in the binary and available everywhere.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: kulvirgit

…pencode/command/discover-and-add-mcps.md …de/skills/discover-and-add-mcps/SKILL.md.opencode/command/discover-and-add-mcps.md renamed to .opencode/skills/discover-and-add-mcps/SKILL.md .opencode/command/discover-and-add-mcps.md renamed to .opencode/skills/discover-and-add-mcps/SKILL.md

@@ -1,7 +1,10 @@
 ---
-description: "Discover MCP servers from external AI tool configs and add them permanently"
+name: discover-and-add-mcps
+description: Discover MCP servers from external AI tool configs and add them permanently
 ---
 
+# Discover & Add MCP Servers
+
 Discover MCP servers configured in other AI tools (VS Code, Cursor, GitHub Copilot, Claude Code, Gemini CLI) and add them to the altimate-code config.
 
 ## Instructions

docs/docs/configure/mcp-servers.md

@@ -85,6 +85,25 @@ altimate mcp
 altimate mcp test my-tools
 ```
 
+## Auto-Discovery
+
+Altimate Code can automatically discover MCP servers from other AI tools on your machine (VS Code, Cursor, GitHub Copilot, Claude Code, Gemini CLI). At startup, discovered servers are shown in a toast notification.
+
+- **Home-directory configs** (e.g., `~/.claude.json`) are auto-enabled since they are user-owned.
+- **Project-scoped configs** (e.g., `.vscode/mcp.json`) are discovered but **disabled by default** — run `/discover-and-add-mcps` to review and enable them.
+
+To disable auto-discovery:
+
+```json
+{
+  "experimental": {
+    "auto_mcp_discovery": false
+  }
+}
+```
+
+See the [Security FAQ](../reference/security-faq.md#what-is-mcp-auto-discovery) for full details on the security model.
+
 ## Experimental Settings
 
 ```json