Provide a way to exclude specific resources from MCP tooling support.
Optionally with sub-resources like getting logs, running commands, ...

Could be an annotation on the resource with what is allowed.

e.g.

myDb1.WithMcpOptions(options => options.DisableResource());
myDb2.WithMcpOptions(options => options.DisableCommands());