The New Security Control Point: Governing AI Agents Inside the Execution Loop - Qubicweb