The Hidden Threat Inside Your Finance AI: What CFOs Need to Know About MCP Security Risks