Agents now act. Your stack must secure them.