Detect AI agent privilege drift from permission age, scope change, tool usage, owner approval, and risk class