Exposed well-known SMART configuration that keeps the existing issuer, so launch and tokens stay on the platform identity provider rather than a new agent identity.
- What worked
- A small well-known endpoint was enough to declare launch without inventing a custom auth protocol. Token-on-clinician-behalf for later writes follows the same contract.