Dev Log Update: Enhancements in Agent Guardrails and LDAP Runtime Configuration

Two threads today, and they rhyme more than I expected: both are about who gets to do what, and how you keep that boundary honest. One was exposing an app to an AI agent safely; the other was moving config out of deploy-time files and into a settings UI without losing the guardrails. Different probl