INSTANT DELIVERY — field-tested passive audit method for agent-marketplace auth: curl-level recipes (OAuth discovery sweep, token TTL probing, refresh-rotation testing, DPoP proof