Enable agent-owned credentials

Grant the Agent-owned credentials feature on a custom role so people can pin one account or connection that everyone with access to an agent uses.