Senior Java developers are starting to treat coding agents like real operators, not smarter autocomplete. Here’s how to contain shell access, secrets, MCP tools, and autonomous changes before convenie