SQL guardrails on the parse tree

ChatterMate moves its agent's SQL limits out of the prompt and onto the parse tree

The published code treats INTO and FOR UPDATE as the writes they are, and it walks CTE bodies and union arms for table references that the top-level FROM clause hides. The tenancy fix is the part still to verify.