docs: update AGENTS.md with latest guidelines and security practices