Machine credentials for agents. A per-key daily spend cap bounds how much an agent can burn per day (wallet balance still applies).