How a security team adds deception controls to agent and Model Context Protocol traffic at MuleSoft Flex/Omni Gateway using custom Rust/WebAssembly PDK policies: a honeytoken tripwire, a decoy-tool sentinel, breadcrumb misdirection, and an opt-in coordinator that orders detection and transformation…