Agent records & intake.

Review tenant-scoped agent records and store notes for manual triage. Notes are recorded here; they do not invoke an agent. Proposed external actions remain read-only and must be decided in the main approvals queue.