MCP-Secure: A Runtime Access Control Layer for Privilege-Aware LLM Agent Tooling (IEEE Open Journal of the Computer Society, 2026)