AgentLock v1.1.1 - PII Defense Patch

Security fix: PII data was being fetched into memory before redaction. Added gate-level classification check that blocks tool execution before data is retrieved when the caller's clearance is below the tool's output classification. 16 new tests. Full backward compatibility (max_output_classification defaults to None).