Record Phase 1 key setup and board-only key minting (AUD-53)

Co-Authored-By: Paperclip <noreply@paperclip.ing>

docs/outline/04-agent-runbook.md

@@ -9,10 +9,16 @@ result that returns.
 
 ### Steps
 
-1. Create a Paperclip agent API key for this project.
+1. Create a Paperclip agent API key for this project. **DONE.**
    - Paperclip board: `http://192.168.20.13:3100`.
-   - Store the key in `~/.config/environment.d/10-secrets.conf` as
+   - Agent: `Hub`, id `108c6220-c9e1-4b62-9e0a-6a763e0d28fd`.
+   - Key name: `hub-service`.
+   - The key is stored in `/home/sam/.config/environment.d/10-secrets.conf` as
      `PAPERCLIP_API_KEY`. Never commit it.
+   - Verification: `GET /api/agents/me` with the key returns `200` and the name
+     `Hub`.
+   - Note: `POST /api/agents/{id}/keys` is **board-only**. A run JWT gets
+     `403 Board access required`. Mint keys with the local board key.
 2. File one job with `curl`. Use the issue-create endpoint.
 3. Confirm the job appears in the Paperclip board.
 4. Wait for the agent to close the job.