feat: enhance agent management and validation logic

- Updated AGENTS.md to clarify agent account restrictions and permissions.
- Implemented checks in AgentNodeAdminUserStoreController and AgentNodeRoleStoreController to restrict admin user and role creation to the agent's own node.
- Enhanced validation in AdminPlayerStoreController and AdminPlayerUpdateController to enforce credit limit and rebate rate rules based on player funding mode.
- Refactored various request classes to utilize shared admin account field rules for consistency.
- Improved error handling in services related to credit allocation and rebate limits to ensure proper validation and messaging.

app/Support/AgentDelegationAuthorization.php

@@ -45,6 +45,14 @@ final class AgentDelegationAuthorization
             return AdminPermissionBridge::allLegacySlugs();
         }
 
+        // Check if admin is a platform account (bound via admin_user_site_roles)
+        $accessibleSiteIds = $admin->accessibleAdminSiteIds();
+        if ($accessibleSiteIds !== null) {
+            // Platform account (site admin) - return their actual permissions
+            return $admin->adminPermissionSlugs();
+        }
+
+        // Agent account (bound via agent node)
         $node = $admin->primaryAgentNode();
         if ($node === null) {
             return [];
@@ -68,6 +76,14 @@ final class AgentDelegationAuthorization
             return false;
         }
 
+        // Check if admin is a platform account (bound via admin_user_site_roles)
+        $accessibleSiteIds = $admin->accessibleAdminSiteIds();
+        if ($accessibleSiteIds !== null) {
+            // Platform account (site admin) can manage all nodes in the site
+            return true;
+        }
+
+        // Agent account (bound via agent node)
         $actor = AdminAgentScope::primaryAgentNode($admin);
         if ($actor === null) {
             return false;