A team repeatedly asks a coding agent to follow the same repository-specific procedure. Which approach best fits?

1. Configure an authorized MCP server with narrowly scoped capabilities.
2. Run it in an appropriately isolated development sandbox.
3. Add an enforced approval boundary before deployment actions.
4. Package the procedure as a reviewed skill or reusable instruction artifact.