AI browser agents can click, read, and act across SaaS tools. Here is a practical small-business security plan for prompt injection, permissions, approval gates, and audit logs.