The identity forgery pattern: why your agent's credentials need an expiry, not just a scope