security-gate

Classifies inbound Telegram messages for telclaude as ALLOW/WARN/BLOCK with brief rationale.