Context broker

Scoped, time-boxed data access per project — what each stage's agent can reach, and in which mode.