Securing GitHub Copilot agent mode and MCP Workflows with runtime guardrails | Hacker News Reader