Get Agent Connections

Get the tenant's saved agent connections.

Returns the bulk shape (LLM / MCP / HTTP connection arrays). Secrets are masked (sk-a****xyzw partial mask for apiKey/clientSecret; ******** for bearerToken/headerValue and every value inside a headers dict), so read:agents is the correct gate - a team member with read-only access can see which connections exist to reason about agent configuration without being able to mutate them. The unmasked plaintext is only reachable via the internal _load_agent_connections_decrypted helper used at deploy time - never via an HTTP endpoint.