feat: add agent API and operational analytics

tests/config-persistence.test.ts

@@ -42,11 +42,15 @@ describe('ConfigStore', () => {
     const config = getTestConfig();
     config.openrouter.apiKey = 'database-must-not-contain-this';
     config.web.authToken = 'also-secret';
+    config.web.agentReadToken = 'read-agent-secret';
+    config.web.agentControlToken = 'control-agent-secret';
     store.save(config);
 
     const row = db.prepare('SELECT config_json FROM app_config WHERE id = 1').get() as { config_json: string };
     expect(row.config_json).not.toContain('database-must-not-contain-this');
     expect(row.config_json).not.toContain('also-secret');
+    expect(row.config_json).not.toContain('read-agent-secret');
+    expect(row.config_json).not.toContain('control-agent-secret');
     expect(JSON.parse(row.config_json)).not.toHaveProperty('database');
   });