Tool Tag coding agent security

Runtime control layer that stops dangerous coding agent actions before they become incidents.