I built an open-source security plugin for Claude Code & Cowork — it makes Claude security-aware by default