How to let an AI operate a real WordPress site (pages, Divi, SEO, media) safely: access scope, backup before writes, human validation, and what it actually does well.