Mutual TLS

Optional client certificate authentication for agent connections can be enabled with agentMtlsEnabled. When active, agents must present a valid client certificate during the TLS handshake, providing an additional layer of identity verification beyond token-based auth. Enable via AGENT_MTLS_ENABLED=true.