Tool and Connector User Credentials

Runs an agent's tools, connectors, and flows under each end user's own credentials by default instead of shared maker-provided credentials, and warns makers before publishing if they weaken it. Reduces the risk of over-privileged connectors and broken per-user attribution.