PAM platforms vault the credentials you've onboarded. In 2026, the most dangerous privileged identity is an OAuth token bound to an AI agent your PAM platform has never seen. Here's why discovery is the missing input.