Return the agent principals this orchestrator knows about.

ServiceProviderConfig reports filter.supported = false, so a filter query is refused rather than ignored: silently returning the unfiltered list would hand a client more principals than it asked for and look like a successful narrow query.