I built a local security layer for Claude Code — it blocked four different routes to my .env