test(signals): align fixtures with strict emit validation

fix(signals): reject invalid emit references cleanly

fix(signals): validate unresolved emit references

feat(streaming): add private-mode SSE auth tickets

fix(bootstrap): redact generated secrets by default

fix(webhooks): minimize retained delivery payloads

fix(agent-card): restrict foreign identity lookups

fix(signals): enforce audience on signal reads

fix(inbox): cast receipt datetimes for surrealdb v3

feat(workflow): ship agent home loop and refresh docs

docs(260401-flz): record phase a resume quick task

feat(quick-260401-flz): add workflow resume mcp tool

test(quick-260401-flz): add failing workflow mcp tests

feat(quick-260401-flz): expose workflow resume in sdk and cli

test(quick-260401-flz): add failing workflow sdk and cli tests