Inside Figma’s AI security playbook: Zero Trust, no VPN and sandboxed agent ET Now