Verify who's calling before your agent runs a tool.

Eve channels can take any authenticator. This one is @Clerk, mapping a session token into an @eve principal.

every tool downstream gets the real user id