docs: update stale enableAllProjectMcpServers notes for new input

Addresses claude-review finding on PR #1250 — base-action/README.md:255
and docs/configuration.md:332 still said the setting is 'always set to
true'.

:house: Remote-Dev: homespace

Author: OctavianGuzu

base-action/README.md

@@ -252,7 +252,7 @@ The settings file supports all Claude Code settings options including:
 - `includeCoAuthoredBy`: Include co-authored-by in git commits
 - And more...
 
-**Note**: The `enableAllProjectMcpServers` setting is always set to `true` by this action to ensure MCP servers work correctly.
+**Note**: The `enableAllProjectMcpServers` setting is controlled by the `enable_all_project_mcp_servers` input (default `false`) and overrides any value provided via `settings`. Set the input to `true` only when the checkout's `.mcp.json` is trusted.
 
 ## Using MCP Config
 

docs/configuration.md

@@ -329,7 +329,7 @@ For a complete list of available settings and their descriptions, see the [Claud
 
 **Notes**:
 
-- The `enableAllProjectMcpServers` setting is always set to `true` by this action to ensure MCP servers work correctly.
+- The `enableAllProjectMcpServers` setting is controlled by the `enable_all_project_mcp_servers` input (default `true` for this action) and overrides any value provided via `settings`.
 - The `claude_args` input provides direct access to Claude Code CLI arguments and takes precedence over settings.
 - We recommend using `claude_args` for simple configurations and `settings` for complex configurations with hooks and environment variables.