Support stamping permissions on blueprint for non-AITeammate setups

[sellakumaran]

Description
In non-AITeammate scenarios, permissions are currently stamped directly on the agent identity. This limits visibility of agent permissions in MAC.
We need the ability to stamp permissions at the blueprint level (instead of, or in addition to, the agent identity). This would enable MAC and other dependent systems to discover, interpret, and reason over permissions more effectively.

Problem

Permissions are applied only to the agent identity in non-AITeammate scenarios.
MAC does not have visibility into these permissions.