AI coding assistants are reshaping developer endpoints in ways most threat models miss. The developer isn't the only agent making decisions at the keyboard.