[Feature]: credential proxy daemon — zero-knowledge HTTP/HTTPS broker for agent credentials

This feature proposes a credential proxy daemon that intercepts HTTP/HTTPS at the transport layer so the real credential value never exists anywhere the agent process can read it, addressing a gap left by existing env-scoping and PID-isolation mitigations.