pub const AGENT_KEY_FILE_ENV: &str = "DBMD_AGENT_KEY_FILE";Expand description
Environment variable naming the PATH of an agent signing key file
(link.md §8 LinkMD-Sig proof of possession). When set, authenticated
requests are signed per-request with the agent’s Ed25519 key instead of
carrying a bearer: the signature binds method + path + body + a ±60s
window, so nothing reusable ever crosses the wire or lands in a log or an
agent transcript. The file holds the base64url PKCS#8 key minted by
dbmd key generate; the path is not a secret, the file is (mode 0600).