Ori Harness cookbook brings MDM, keyless auth

This is a meaningful enterprise hardening step for AI coding agents, moving credential management from individual laptops into centralized identity and device policy.

• –OIDC access tokens expire after roughly 24 hours, sharply reducing the blast radius of stolen credentials
• –MDM policies can restrict sign-in methods, organizations, workspaces, and approved agent harnesses
• –Jamf, Kandji, Intune, Linux, and Windows deployment paths make the workflow practical for mixed fleets
• –Existing API keys are not automatically deleted, so teams still need a cleanup and revocation step
• –The protection is not absolute: Ori still stores a session, and unsigned releases remain a local security concern