“The beast needs a cage”: Why PortSwigger’s agentic pentesting is kept safe behind bars — PLINKFEED