A Copilot Studio agent for a financial services firm answers customer questions by grounding on uploaded PDF documents and public web content. During a security review, the architect discovers that malicious instructions embedded inside an uploaded document caused the agent to ignore its system instructions and reveal internal pricing logic. Which mitigation most directly addresses this indirect prompt injection risk while preserving the agent's grounding capability?