yolo-cage: AI coding agents that can't exfiltrate secrets or merge their own PRs