Fix RCE Vuln: Remove DANGEROUSLY_OMIT_AUTH=true from dev scripts

[JLLeitschuh]

Summary

The DANGEROUSLY_OMIT_AUTH=true allows any website visited by a developer to maliciously attack the MCP server running locally on the dev machine, achieving remote code execution.

https://www.tenable.com/blog/how-tenable-research-discovered-a-critical-remote-code-execution-vulnerability-on-anthropic

Checklist

• Added or updated necessary tests (Optional).
• Updated documentation to align with changes (Optional).
• Verified no breaking changes, or prepared solutions for any occurring breaking changes (Optional).
• My change does not involve the above items.

[netlify]

✅ Deploy Preview for tarko canceled.

Name	Link
🔨 Latest commit	21423c9
🔍 Latest deploy log	https://app.netlify.com/projects/tarko/deploys/68fbbaab4b11b40008fa4cd1

[CLAassistant]

All committers have signed the CLA.

[netlify]

✅ Deploy Preview for agent-tars-docs canceled.

Name	Link
🔨 Latest commit	21423c9
🔍 Latest deploy log	https://app.netlify.com/projects/agent-tars-docs/deploys/68fbbaab083bfd0009ffe6df

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 14.26%. Comparing base (3e31c89) to head (21423c9).
⚠️ Report is 13 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1731   +/-   ##
=======================================
  Coverage   14.26%   14.26%           
=======================================
  Files         250      250           
  Lines        8562     8562           
  Branches     1672     1672           
=======================================
  Hits         1221     1221           
  Misses       7166     7166           
  Partials      175      175           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.