A worker's key runs its own Apps

A key made by another key, or a key in a compartment, can now create, list, deploy, roll back and delete the Apps and Functions its own agent made, as it does sandboxes, over the API and MCP. Another agent's App still answers 404. Such a key deploys from an image only: a deploy naming a build answers 403 (forbidden, or outside_compartment in a compartment); deploy builds with an account's key. Such a key asks an App for at most 2 minCopies, 2 spares and 20 maxCopies; a larger App is made with a key made on the website. It cannot give an App or Function a name one of the account's own Apps holds: create or rename answers 409 name_taken. See Run a swarm.