Agency workspace setup.

Use the private application operator key. This is separate from agency staff/client access and never uses a Cloudflare management credential.

Create an authorized agency