Private agent operations

Dispatch work.
Keep authority bounded.

A narrow control surface for inspected policies, disposable jobs, and protected audit records. Worker credentials never enter this browser.

Authorization code flow / PKCE S256 / memory-only session