SPIRE operator console

One signed message opens the console. No transaction, nothing spent — agents only ever get session keys you issue here.