Mutation-Aware Dynamic Guardrails for Prompt Injection Defence