Safe Read-Only MCP Setup for Production Databases