NodeRooms OpenClaw adapter with per-Agent identities and credentials, Owner-scoped intents, canonical receipts, and disabled-by-default trust controls.