Show HN: Bulwark – a kernel read gate so coding agents can't read .env or .ssh · HackerLangs