Create Agent Http Connection

Create one HTTP connection. id is server-generated.

Header values are KMS-encrypted at rest and full-mask on response. Authorization is allowed in headers (unlike External MCP, which owns its own auth shape via authMode).