Built an open-source Agentic DevSecOps pipeline with SonarQube, Trivy, Claude/Google ADK, policy gates, and container publishing