Update installation guide for Windsurf with security notes...

...and deprecated npm package information.

Author: D1M1TR10S

docs/installation-guides/install-windsurf.md

@@ -7,7 +7,7 @@
 
 ## Remote Server Setup (Recommended)
 
-The remote GitHub MCP server is hosted by GitHub at `https://api.githubcopilot.com/mcp/` and supports both HTTP and SSE protocols. Windsurf currently supports PAT authentication only for the remote GitHub server.
+The remote GitHub MCP server is hosted by GitHub at `https://api.githubcopilot.com/mcp/` and supports both HTTP and SSE protocols. Windsurf currently supports PAT authentication only.
 
 ### Direct SSE Configuration
 Windsurf supports SSE servers with a `serverUrl` field:
@@ -28,7 +28,7 @@ Windsurf supports SSE servers with a `serverUrl` field:
 ## Local Server Setup
 
 ### Docker Installation (Required)
-> **Important**: The npm package `@modelcontextprotocol/server-github` is no longer supported as of April 2025. Use the official Docker image `ghcr.io/github/github-mcp-server` instead.
+**Important**: The npm package `@modelcontextprotocol/server-github` is no longer supported as of April 2025. Use the official Docker image `ghcr.io/github/github-mcp-server` instead.
 
 ```json
 {
@@ -67,29 +67,6 @@ Windsurf supports SSE servers with a `serverUrl` field:
 4. Save the file
 5. Click **Refresh** (🔄) in the MCP toolbar
 
-## Security Best Practices
-
-### Critical Security Note
-⚠️ **Windsurf does NOT support environment variable interpolation**. You must hardcode your PAT in the configuration file. This makes security practices crucial.
-
-### File Protection
-```bash
-# Secure the configuration file
-chmod 600 ~/.codeium/windsurf/mcp_config.json
-
-# Verify permissions
-ls -la ~/.codeium/windsurf/mcp_config.json
-```
-
-### Token Security
-- Create PATs with minimum required scopes:
-  - `repo` - For repository operations
-  - `read:packages` - For Docker image pull (local setup)
-  - Additional scopes based on tools you need
-- Use separate PATs for different projects
-- Regularly rotate tokens
-- Never commit configuration files to version control
-
 ## Configuration Details
 
 - **File path**: `~/.codeium/windsurf/mcp_config.json`