OK    status with missing harness credential exits 3 and still lists accounts
OK    status reports harness credential (read-only) + mosaic accounts
OK    api key material never reaches output
OK    oauth token material never reaches output
OK    unparseable credential file exits 2
OK    symlinked credential file exits 4
OK    env-side credential names reported
OK    env var values never reach output
OK    accounts without an accounts dir reports none and creates nothing
OK    accounts lists files and marks the active one
OK    loose account perms flagged in listing
OK    agent --auth with missing account file refuses (exit 4)
OK    agent --auth with non-0600 account file refuses
OK    agent --auth with invalid account name refuses
OK    auth.sh without valid config refuses

selftest: 15 passed, 0 failed