AWS Bedrock Guardrails

Move AI guardrails into the gateway before every service ships its own copy

Centralising prompt checks and PII filters at the gateway mirrors putting TLS at the edge, and the arithmetic backs that comparison. The semantic checks themselves, though, work nothing like TLS termination.