Security-first agentic orchestration: plan-time authorization, capability tokens, tamper…