Observability

Guardrail status, token usage, and a live tester to confirm forbidden prompts are blocked.