pub async fn ensure_agent_credential(
agent_id: &str,
mstore: &Arc<Store>,
http: &Client,
) -> Option<String>Expand description
Get a live per-agent access token, provisioning the Cognito client on first use. Returns None (never an error) on any failure — provisioning being down or an agent not yet migrated must degrade to the caller’s shared-token fallback, not block delivery.