mcp-session config Merge uses naked type assertions #4478

Problem

plugins/golang-filter/mcp-session/config.go Parser.Merge does parent.(*config) and child.(*config) without a comma-ok check. A nil or unexpected parent/child type panics during filter chain config merging.

Expected

Use comma-ok assertions with a safe fallback.