t-391
When agent starts, check if OAuth authentication is valid. If not, emit an error event immediately so agentd watch shows the failure instead of the container silently dying.