Build a Copilot Studio agent that answers "where's my invoice?" from your SharePoint invoice list, refuses bank changes and data fishing, and the limits to know before vendors use it.