Set Agent Accounts

Point one agent at specific accounts, or clear it back to the default.

Admin, not superuser: unlike the engine above, which account an agent reports on is the client's own decision. Writing the whole mapping in one call keeps it atomic — a picker that cleared one connector and set another would otherwise leave the agent half-configured between two requests.