App security in the agentic era