feat(cli): add fullsend agent subcommand for managing agent registrations

Signed-off-by: Greg Allen <gallen@redhat.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Greg Allen <gallen@redhat.com>

Author: ggallen

docs/cli/README.md

@@ -23,6 +23,7 @@ Download the latest binary from [GitHub Releases](https://github.com/fullsend-ai
 | Command | Description |
 |---------|-------------|
 | `fullsend run` | Execute an agent locally in a sandbox. See [running agents locally](../guides/user/running-agents-locally.md). |
+| `fullsend agent` | Manage agent registrations in config (add, list, update, remove) |
 | `fullsend lock [agent-name]` | Pin remote dependencies to `lock.yaml` |
 | `fullsend scan` | Run security scanners on agent input/output |
 

docs/guides/dev/cli-internals.md

@@ -38,6 +38,11 @@ fullsend
 │   ├── status       <org>                   # Analyze GitHub-side state
 │   ├── uninstall    <org>                   # Remove fullsend GitHub configuration
 │   └── sync-scaffold <org>                  # Update workflow templates
+├── agent                                    # Manage agent registrations in config
+│   ├── add          <url-or-path>            # Register an agent (URL auto-pinned)
+│   ├── list                                  # List registered agents
+│   ├── update       <name> [sha]             # Re-pin URL agent to new commit SHA
+│   └── remove       <name>                   # Unregister agent from config
 ├── lock             [agent-name]              # Pin remote deps to lock.yaml
 │   ├── --all                                #   Lock all harnesses in the harness directory
 │   ├── --fullsend-dir <path>                #   Base directory with .fullsend layout

docs/guides/getting-started/operations.md

@@ -71,6 +71,11 @@ For organizations that separate GCP and GitHub responsibilities across teams, fu
 | GCP Admin (Mint) | `fullsend mint unenroll <org\|owner/repo>` | Remove an org or repo from the mint |
 | GCP Admin (Mint) | `fullsend mint status` | Inspect mint state and PEM health |
 
+| Developer | `fullsend agent add <url-or-path>` | Register an agent in config (URL auto-pinned to commit SHA) |
+| Developer | `fullsend agent list` | List registered agents and their sources |
+| Developer | `fullsend agent update <name> [sha]` | Re-pin a URL agent to a new commit SHA |
+| Developer | `fullsend agent remove <name>` | Unregister an agent from config |
+
 The typical handoff: a GCP admin runs `mint deploy` + `mint enroll` + `inference provision`, then passes the mint URL and WIF provider resource name to a GitHub maintainer who runs `github setup --mint-url=... --inference-wif-provider=...`.
 
 ### Per-command IAM role breakdown