Move AI guardrails from prompts to code

Text-based rules like 'do not write outside src/' fail because they compete with task context. A path gate that resolves and checks paths before tool calls enforces safety. This turns soft instructions into binary checks, preventing violations even when the model understands the rule.