“Onyx Security's technical approach involves training small, specialized models whose sole function is to determine when a more powerful, expensive agent should be invoked to review a specific action.”