Stop relying on .claudeignore - We built a kernel-level sandbox (aigate) so AI agents can't read your secrets or run malicious commands