Agent mandate

Admin only

Why is this disabled? The ceiling lives in a signed token claim (https://mandate.dev/mandate) minted by Auth0 on the agent's client-credentials exchange. Nothing typed here would change what the server trusts.