[BUG]: Denied MCP tools have their tool prompt in the context

I have the Sentry MCP server configured.

I have disabled a number of the tools:

    "deny": [
      "NotebookRead",
      "NotebookEdit",
      "mcp__ide__executeCode",
      "mcp__sentry__analyze_issue_with_seer",
      "mcp__sentry__create_team",
      "mcp__sentry__create_project",
      "mcp__sentry__update_project",
      "mcp__sentry__create_dsn"
    ]

The newly add /context command reveals that the denied MCP tools are still added to the context. The denied built-in tools are not added though.

Permanently denied MCP tools shouldn't be provided to Claude.