Enables verification of agent control file provenance (signature, integrity, certificate, and trust group) via MCP tools before loading.
