Personal agent authority for OpenClaw: decide what your agent may do on its own, what it must ask about first, and what it may never do.