Step 3: Configure Trust Policy

1. Define trust rules in the admin UI
2. Example: Agent A trusts Agent B's SPIFFE ID
3. Policies are enforced via workloads API