AGENT_TOKEN

Pre-shared authentication token for Agent-to-Proxy gRPC connections. The Proxy rejects any agent RPC whose token does not match; the Agent presents this value as a metadata header on every call. Both sides must share the same value. Empty (default) disables token authentication and preserves the open behavior.