A Practical Security Guide for AI-Generated Code, for Developers Who Didn't Write Half of What They Shipped