Foo Guard scans AI agent configs and MCP tool definitions for risky permissions, exposed credentials, and unsafe autonomy. Enforce security policy in GitHub and CI before production.