Countersign: give an AI agent a wallet, not the keys