creator-os runtime · RightOnPar LLC · agents hold grants, never keysmachine surface: /routes · /mcp · manifest · /docs · /selftest