Inline ops-warden credential routing canon into AGENTS.md and CLAUDE.md so agents route secret requests through warden route instead of messaging ops-warden on State Hub.