6 Guardrails That Stopped My Coding Agent From Burning Through API Budget