How to govern agents you did not build (open-source, partner, A2A) on a live Flex/Omni Gateway. Route the agent's LLM traffic through a Model Proxy (client-id-enforcement, llm-proxy-core, model-based-routing, llm-token-rate-limit) and front its A2A endpoint with an A2A instance carrying client-ID e…