hermes - 💡(How to fix) Fix Add authenticated cross-agent intake for L

What to build

Add a narrow authenticated intake path so Leo's other agents, partner-side agents, or approved system actors can send tasks, ask for allowed context, or request approvals from L. The slice should preserve the role model, avoid unauthenticated endpoints, and log every cross-agent advice or routing event into the ledger.

Acceptance criteria

• Non-LINE agent-to-agent requests require authentication and include actor identity plus role metadata.
• Cross-agent requests are evaluated against the role and action policy before any response or routing.
• Approved requests can create an inbox item or context request visible to Leo through the ledger/audit artifacts.
• Denied or confirmation-required requests are logged without leaking leo_private context.

Blocked by

• #23839
• #23840