Gate agent-run ML pipelines from data checks, eval coverage, approval state, rollback plan, and cost risk