Secured agents

[alexheifetz]

This pull request introduces a new secured agent example to the Java/Kotlin codebase, focusing on JWT-based security and domain-driven types for market intelligence and news digest agents. It adds new domain types, a secured MCP server application, and agent implementations, as well as supporting configuration and test assets.

Secured agent infrastructure and configuration:

• Adds a new Maven profile (enable-secured-agent-mcp-server) to pom.xml for building and running the secured MCP server with required dependencies (embabel-agent-starter-mcpserver and embabel-agent-starter-mcpserver-security).
• Introduces JavaAgentSecuredMcpServerApplication.java, a Spring Boot application that enables JWT security for MCP endpoints and method-level authority checks, with clear documentation for OAuth2 setup and agent exposure.

Domain types for agents:

• Adds MarketIntelligenceTypes.kt defining domain types for structured market intelligence reports, including AnalysisSubject, CompetitorInsight, SwotEntry, and related list wrappers to support LLM-driven JSON (de)serialization.
• Adds NewsDigestTypes.kt defining types for news digest agents, such as DigestItem, DigestItemList, and NewsTopic, similarly supporting LLM-driven workflows.

Agent implementations:

• Implements MarketIntelligenceAgent.java, a secured agent that produces structured market intelligence reports via a multi-step LLM pipeline, requiring the market:admin authority and using the new domain types.

Supporting assets:

• Adds example JWT payload (payload.json) and private key (private.pem) for local testing and demonstration of JWT authentication. [1] [2]