Agent: Rework authentication and bootstrapping

The current approach is rather elegant in that you don't need to perform any configuration, but it is, for all intents and purposes, a hack.

A cleaner solution would probably be to reuse the credentials the cluster monitor already has, as agents should already be paired with a cluster monitor instance. This will require introducing some kind of "handshake" / setup stage.