Show HN: Bulwark – a kernel read gate so coding agents can't read .env or .ssh

**Brief Summary (2‑3 sentences)** Bulwark is an open‑source kernel‑level read‑gate that blocks AI coding agents from accessing sensitive files such as `.env` an