Security gateway for AI agent tool calls: fail-closed schema + policy + secret-detection gate before any tool executes