Monitoring and Evaluating RAG Security