External action-authorization boundary for LLM agents | SaaSBrowser.ai