Agent Auth connectors

A workflow for providers exposed through the agent-auth tool family (Gmail and similar). The happy path is easy to get subtly wrong in three places: the scope of the agent_id, the constraints you attach to a grant, and the heads-up a user deserves before their account is connected.

The core sequence

Do these in order. Don't guess parameter names — the search step returns the real input schema.