Aroha – signed, shrinking permissions for AI agents, checked offline