Agent Safehouse – macOS-native sandboxing for local agents