MCP server best practices from a real screenwriting app: server-side confirmations, credit caps, safe retries, and why ...