Governing AI Agents at Runtime: Open Source Zero-Trust with AGT | Ubuntu Summit 26.04