M8 added renewalService parameter to NewAgentService. Pass nil in unit tests since they don't exercise the agent-side CSR flow. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>