When the sensor starts thinking: SnortML, agentic AI, and the evolving architecture of intrusion detection