Securing GitHub Copilot agent mode and MCP Workflows with runtime guardrails | Dark Hacker News