GHSA-pqh8-p93p-2rx7: @dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQL

The @dynatrace-oss/dynatrace-mcp-server package has a DQL injection vulnerability (a type of code injection where attackers insert malicious DQL commands, which is Dynatrace Query Language used to query data). Several tools insert user-supplied parameters directly into DQL queries without escaping them, allowing attackers to break out of the intended query by injecting extra DQL pipeline stages (processing steps added to queries) and bypassing security restrictions like field limits and time-window bounds that are supposed to be read-only.