Static API keys are the wrong primitive for agent authentication — PLINKFEED