Safety rules
- Use an agency API key, never a client key, for partner operations.
- Confirm the target client ID before every cross-workspace mutation.
- Treat client creation, plan changes, publish, rollback, and feature updates as administrative actions.
- Log the agency actor, client ID, operation, and response.
- Do not assume a normal workspace key can access partner endpoints.