How do you secure AI coding assistants in real software teams? This practical guide covers least privilege, secrets handling, approvals, sandboxing, and rollout controls.