Keep gateway identity assertions out of agent-visible schemas
A shared transport bearer authenticates a gateway service, not necessarily the end caller. If a trusted gateway injects a signed caller assertion as an internal tool argument, do not expose that argument in the agent-visible schema: exposure invites fabricated identities, while v…