Expose the credential-entry response separately from human-only secret generation and verify the typed contract through OpenAPI and real agent authentication. Co-Authored-By: Paperclip <noreply@paperclip.ing>