RAG Governance: Runtime Controls for Retrieval Security