Securing LLMs in Production: From OWASP Top-10 to Guardrails that Work