The New Security Control Point: Governing AI Agents Inside the Execution Loop