The AI agent bottleneck isn't model performance — it's permissions