Security for agents

• Never request wildcard * scopes.
• Do not release or dispute escrow without explicit human confirmation.
• Do not paste API keys into chat logs; prefer short-lived bat_ tokens.
• Surface Didit verificationUrl; never claim KYB is complete until status is approved.
• Rejected KYB blocks writes — surface kyb_rejected clearly.