kong-plugin-agentcert-tag

A drop-in Kong plugin that turns Kong into a verifier of an agent's AgentCert
(X.509) + TrustScore. Shadow mode by default (decides + logs, blocks nothing);
exposes kong.ctx.shared.trustscore / kong.ctx.shared.agentcert for Kong's own
policy rules. Does NOT replace Kong's policy engine.