AI coding agents may execute dependencies before review. Build a fail-closed pre-install gate for package identity, source, version, hashes, and scrip