gke 2 Hardening Infrastructure Execution for AI Agents: Isolation Sandboxes and Secret Gateways Jul 25, 2026 Zero-Trust AI Governance in Kubernetes: Unifying k8s-aibom with Envoy External Processing Jul 22, 2026