GuardClaw public beta: 7-layer “seatbelt” for AI agents and MCP tools (local, deny-by-default)