Enforce hosted-agent model choices with a two-source intersection
General lesson: A hosted agent that lets users choose models should compute the visible and executable set as the intersection of an immutable tenant/admin allowlist and the authenticated provider account's live model catalog. Enforce that intersection again at every server bound…