Idempotently binds the entry to one agent. Valid only while the entry targets selected agents. Requires resource.edit on the target, not merely resource.view — an agent the caller cannot manage returns 404, identical to a missing one. The binding is a durable delegation: organization environment managers may afterwards rotate the entry without gaining visibility into this agent.