Agents & mandates

Each agent gets its own key and a versioned mandate: caps, merchants and purpose.