About usAI Can Draw, but Tableau Governs: Securing the Tableau MCP