{"service": "lane-enroll", "usage": "POST /enroll {user,pubkey,agent_id}; a live lane approves by fingerprint"}