Safety and limits

Confirmation prompts, sandbox, rate limits.

Work in progress

This page is a stub. Full content lands in the next documentation pass. See docs/brush-system.md for an example of the page shape this stub will grow into.