Zero Trust for AI Systems: Why Authorization Can’t Live Inside the Model