Show HN: Cupcake – Better performance and security for coding agents (via OPA)