Credential isolation and least privilege for AWS agents

A proxy that holds real AWS credentials, gives agents fake keys, re-signs outbound requests, and generates a least-privilege policy from observed behavior.