Mount under /api/agent/ so scope enforcement allows agent tokens.
Use dependency get_current_user_or_agent so both JWTs and agent tokens are accepted where intended.
Call _require_agent(current_user) for endpoints that must be agent-token-only (e.g. in routes/agent/job_descriptions.py).
Rate limits: Global agent limit applies to all /api/agent/ paths; add path-specific limits in middleware/rate_limit.py if needed.
Update this documentation in agent_docs/: add the new endpoint to the homepage API list, and create or update a detail page under api/ with method, path, request/response schema, and error table.