Iran’s attacks exposed the limits of external guarantees and the need for a Gulf-built security architecture.