Your favorite dev copilots are great until one happily reads a secret key, pushes a migration, and quietly locks a production database. Modern AI workflows move fast, but they often skip one basic rule: least privilege. Developers, service agents, and model‑driven pipelines all need data and permissions, yet none