Building a DevSecOps Brain: Private-VPC RAG + Per-Engineer Client Agent, 25,000-Doc Corpus