Added Added support for inventorying Amazon Bedrock AgentCore gateways, gateway targets, and statically declared MCP tools as nested AWS resources When Opal syncs Bedrock AgentCore agents, it now records which AgentCore gateways each agent can invoke through IAM, and which gateway tools it can call under Cedar policy; these appear as read-only entitlements on the agent’s service user, and are removed when a later sync no longer finds the access Agent detail pages now have a Gateways tab that shows Bedrock AgentCore gateway, target and tool access, separate from Resources; an agent’s resource c