Credentialless agent testing with LocalCloud
- Removes the blast radius of an agent calling a destructive cloud API.
- The same pattern serves human inner-loop development and demos.
- Does not remove the need to validate the same code against real Google Cloud before release, or replace production authorization tests.
- Keep local automation credentialless and put real-cloud validation in a separate guarded step.