Prevent LLMs from cloning repos — inline agent rules to block risky ops | saasbrowser.ai