t-666 Agent auth path drift: pipeline/agentd uses ~/.local/share/agent but fresh creds are in ~/.pi/agent