Governance guardrails and insights for AI coding agents