Practical security architecture for AI agents: prompt injection defense, tool-use hardening, and gateway patterns from GitHub's top open-source repos.