SupplyGuard — pre-install dependency risk for AI agents | x402scan