Capability-Based Security for AI Agent Tools

Replace broad ambient credentials with narrow, expiring, attenuable grants bound to one agent task, tenant, operation, and resource set.