Bump ModelContextProtocol from 1.4.0 to 1.4.1 (#20050)

Updated
[ModelContextProtocol](https://github.com/modelcontextprotocol/csharp-sdk)
from 1.4.0 to 1.4.1.

<details>
<summary>Release notes</summary>

_Sourced from [ModelContextProtocol's
releases](https://github.com/modelcontextprotocol/csharp-sdk/releases)._

## 1.4.1

This release backports a memory-leak fix for HTTP/SSE-based MCP servers.
`StreamableHttpServerTransport` now releases its Server-Sent Events
response stream reference as soon as a GET request ends, instead of
holding it until the session is disposed via explicit DELETE or idle
timeout. Long-lived SSE clients that disconnect without sending DELETE
no longer pin the underlying Kestrel connection and its associated
memory-pool buffers (~20 MiB per session), preventing the sustained
memory growth that could accumulate under connect/disconnect churn.

## What's Changed

* Release SSE response stream reference when GET request ends #​1628 by
@​halter73 (co-authored by @​joelmforsyth @​Copilot)

## Acknowledgements

* @​slomangino123 submitted issue #​766 (resolved by #​1628)

**Full Changelog**:
modelcontextprotocol/csharp-sdk@v1.4.0...v1.4.1


Commits viewable in [compare
view](modelcontextprotocol/csharp-sdk@v1.4.0...v1.4.1).
</details>

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ModelContextProtocol&package-manager=nuget&previous-version=1.4.0&new-version=1.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>
###### Microsoft Reviewers: [Open in
CodeFlow](https://microsoft.github.io/open-pr/?codeflow=https://github.com/Azure/bicep/pull/20050)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

src/Directory.Packages.props

@@ -76,7 +76,7 @@
     <PackageVersion Include="Microsoft.VisualStudio.Workspace" Version="17.1.11-preview-0002" />
     <PackageVersion Include="Microsoft.VisualStudio.Workspace.VSIntegration" Version="17.1.11-preview-0002" />
     <PackageVersion Include="Microsoft.Visualstudio.Telemetry" Version="17.12.48" />
-    <PackageVersion Include="ModelContextProtocol" Version="1.4.0" />
+    <PackageVersion Include="ModelContextProtocol" Version="1.4.1" />
     <PackageVersion Include="ModelContextProtocol.AspNetCore" Version="1.2.0" />
     <PackageVersion Include="Moq" Version="4.20.72" />
     <PackageVersion Include="Msagl" Version="1.2.1" />