Agent runtime security: Foundry, GitHub, Mastra updates

This week drew a sharp line between building agents and running them safely in production. Two significant supply chain and trust-boundary failures landed alongside Microsoft's most serious attempt ye...