Function upsert_agent_at 

pub fn upsert_agent_at(
    storage_root: &Path,
    agent: AgentDefinition,
    now_unix: u64,
) -> Result<(), String>

upsert_agent with an explicit now_unix timestamp, for deterministic testing and callers that already hold a clock reading.