Provider-mandate census for agent credentials

com.textforagents/provider-mandate-census-agent-credentials

Find unflagged agent OAuth clients before the mandate lock — signed per-client census verdicts.