quarantineccdwyer/quarantineWraps web, MCP and third-party tool output as untrusted data and defangs prompt-injection lines before the model reads them