chore(scc): release scc-mcp v0.2.0

[dandye]

Summary

Bumps scc-mcp package version from 0.1.1 to 0.2.0 across server/scc/pyproject.toml and server/scc/setup.py.

This release includes the major migration to Google Cloud Security Command Center (SCC) API v2, full organization-level findings support, and four new finding and compliance management MCP tools.

---

What's Changed in SCC MCP v0.2.0

1. Security Command Center API v2 Migration

• Migrated from legacy google.cloud.securitycenter (v1) to google.cloud.securitycenter_v2.
• Added location-awareness (locations/{location}, defaulting to "global"), supporting regional data residency and resolving the v1 deprecation error (Fixes Supporting SCC APIv2 #167).
• Updated finding serialization and Attack Exposure Score extraction to support the nested v2 message structure (finding.attack_exposure.score).

2. Organization-Level Finding Queries (Fixes #248)

• All tools now accept either project_id or organization_id, enabling enterprise-wide finding queries across all projects under an organization node (organizations/{organization_id}/sources/-/locations/{location}).
• Cloud Asset Inventory (CAI) enrichment dynamically adapts search scope to organizations/{organization_id} when querying at the organization level.

3. Four New Security & Compliance MCP Tools

• search_findings: Universal search across all 9 finding classes (VULNERABILITY, THREAT, MISCONFIGURATION, OBSERVATION, SCC_ERROR, POSTURE_VIOLATION, TOXIC_COMBINATION, SENSITIVE_DATA_RISK, CHOKEPOINT), severities, mute states, and raw custom filter clauses with full pagination.
• get_finding_details: In-depth finding inspection returning MITRE ATT&CK tactics/techniques, CVE and vulnerability attributes, compliance benchmarks, and optional CAI resource enrichment.
• search_findings_by_compliance: Enables natural-language and control-level searches by compliance frameworks (CIS GCP Foundations, PCI-DSS, NIST 800-53, ISO 27001) or free-text descriptions (e.g. "MFA not enforced", "ServiceAccount admin").
• set_finding_mute: Mutes (MUTED) or unmutes (UNMUTED) findings, resolving the canonical resource name before invoking SetMuteFindingRequest.

4. Enhancements and Bug Fixes

• Attack Exposure Score Sorting Fix: top_vulnerability_findings now over-fetches a larger candidate pool (min(max_findings * 10, 1000)) before sorting descending by exposure score, ensuring highest-risk findings across the entire population are surfaced rather than just sorting the first page. Added inline remediation steps (nextSteps).
• Case-Insensitive Filter Split Fix: Fixed _build_or_filter to use case-insensitive regex parsing (re.split(r"\s+or\s+|,", ...)), allowing natural language queries like severity="high or critical".
• Dynamic Exception Formatting: Fixed NotFound exception handlers to dynamically format target scope (target_label) for both projects and organizations (Fixes [scc-mcp] Error messages in NotFound exception handlers format project_id as None when querying by organization_id #296).

[dandye]

Superseded by PR #300