Googles Agent Identity is already built around SPIFFE but others are not. I believe the substrate egress-gateway needs to handover the internal SPIFFE one to a

Googles Agent Identity is already built around SPIFFE but others are not. I believe the substrate egress-gateway needs to handover the internal SPIFFE one to an external system (e.g. Entra Agent ID). Not sure if that should be part of substrate or kagent/ax/..