Three quiet leaks in agent work, and one fix for each

Most agent trouble isn't dramatic. It's three small leaks that sit there until one turns into a leaked key or a surprise bill. 1. Prompts that only live in a vendor dashboard If a prompt only exists i