Cursor no longer stops at writing code. Its agents now spin up databases, configure logins and hosting, and check for security flaws before apps go live.