Google has unveiled CodeMender, a new AI-powered security agent designed to find and fix software vulnerabilities automatically - marking a major step in its effort to make code "secure by design".