Read and edit Markdown notes on your personal computer via SSH tunnel. Use when the user asks to read, create, or append to notes in their vault.
Block set-root from remote access to prevent vault sandbox bypass