Demo 3: Block by argument content

Policy: Block WebMCP, rule matches on tool.arguments contains "book". One update_cart call passes; another with a matching payload is blocked mid-flight, with the exact argument JSON captured in the detection.