AI Agent Dependency Lockfiles: Stop Silent Tool and Package Drift

Build a reproducible agent runtime by pinning models, prompts, MCP tools, packages, and policies with an agent dependency lockfile.