AI access control for GitHub Copilot

Kastra evaluates every Copilot Agent action against policy — blocking unauthorized edits, commands, and merges.