addr-standardize

SUSPICIOUS. The stated purpose is coherent, but the trust model is not proportionate: it asks the agent to download and run an unverifiable script from `fittings.sh` and pass it a blockchain private key to enable paid calls. That combination creates high supply-chain and credential-forwarding risk even though the API purpose itself is legitimate.