OpenAI's Admin Plugin turns workspace administration into a permission-aware agent loop. The real design is identity, action control, approval, eviden