Rename the Agent Network self-service route to /agent-network/agent-config

The endpoint returns the config a local AI tool needs, so name it for
  that rather than for the caller-scoped "me" prefix.

agent-network/README.md

@@ -118,7 +118,7 @@ Two roles delegate Agent Network access without account-admin rights:
   through the self-scoped endpoints below.
 
 Every authenticated user, regardless of role, can read the caller-scoped
-self-service endpoint `GET /api/agent-network/me/setup` (the endpoint, providers,
+self-service endpoint `GET /api/agent-network/agent-config` (the endpoint, providers,
 and models the caller's own policies allow — what a local AI tool needs and nothing
 more). The regular usage and access-log endpoints self-scope instead of denying:
 a caller without the account-wide grant gets their own rows back, so "my usage"

management/internals/modules/agentnetwork/handlers/me_handler.go

@@ -18,7 +18,7 @@ import (
 // the regular usage/logs endpoints, which self-scope for callers without
 // the account-wide grants.
 func (h *handler) addMeEndpoints(router *mux.Router) {
-	router.HandleFunc("/agent-network/me/setup", h.getMySetup).Methods("GET", "OPTIONS")
+	router.HandleFunc("/agent-network/agent-config", h.getMySetup).Methods("GET", "OPTIONS")
 }
 
 func (h *handler) getMySetup(w http.ResponseWriter, r *http.Request) {

shared/management/http/api/openapi.yml

@@ -13852,7 +13852,7 @@ paths:
           "$ref": "#/components/responses/forbidden"
         '500':
           "$ref": "#/components/responses/internal_error"
-  /api/agent-network/me/setup:
+  /api/agent-network/agent-config:
     get:
       summary: Retrieve the caller's Agent Network setup
       description: Returns everything the caller needs to configure a local AI tool and nothing more - the account's Agent Network endpoint plus the providers and models the caller's own policies allow. Available to every authenticated user regardless of role; the response never contains provider credentials, policy or guardrail configuration, or providers the caller cannot reach.