Secure email proxy for AI agents — content filtering, PII redaction, and prompt injection detection over MCP