URL safety preflight: screen a link before an agent opens it — syntax, host/IP, patterns, redirects, optional threat intelligence.