A production and security hardening guide for the Claude Agent SDK: hooks as policy gates, sandboxing, secrets …