feat: add secure agent and MCP extensions

backend/apps/agents/migrations/0005_agentversion_allowed_actions.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.2.15 on 2026-07-27 04:58
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('agents', '0004_agentrunevent'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='agentversion',
+            name='allowed_actions',
+            field=models.JSONField(blank=True, default=list),
+        ),
+    ]

backend/apps/agents/migrations/0006_step_model_deployments.py

@@ -0,0 +1,34 @@
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("agents", "0005_agentversion_allowed_actions"),
+        ("modelhub", "0002_modelprovider_image_egress_approved_and_more"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="agentstepbinding",
+            name="model_deployment",
+            field=models.ForeignKey(
+                blank=True,
+                null=True,
+                on_delete=django.db.models.deletion.PROTECT,
+                related_name="agent_step_bindings",
+                to="modelhub.modeldeployment",
+            ),
+        ),
+        migrations.AddField(
+            model_name="agentrunstep",
+            name="model_deployment",
+            field=models.ForeignKey(
+                blank=True,
+                null=True,
+                on_delete=django.db.models.deletion.PROTECT,
+                related_name="agent_run_steps",
+                to="modelhub.modeldeployment",
+            ),
+        ),
+    ]