fix(web-admin): agentsFromConfig() references removed agents block

[ggallen]

Context

PR #2517 (ADR-0045 Phase 4, PR 4) removed OrgConfig.Agents from the Go backend. The web admin TypeScript code still references the agents config block.

Problem

web/admin/src/lib/layers/orgConfigParse.ts:197 — agentsFromConfig() reads cfg.agents which will always be [] after this change. The comment on line 196 (mirrors config.OrgConfig.Agents) is now factually incorrect. This causes analyzeSecretsLayer to vacuously report "installed" without checking any secrets/variables.

Fix

Update agentsFromConfig() to derive agent roles from defaults.roles instead of reading the removed agents block.

References

• ADR: docs/ADRs/0045-forge-portable-harness-schema.md
• Flagged by fullsend-ai-review bot (medium) and review squad (low) on PR refactor(config): remove OrgConfig.Agents field (ADR-0045 Phase 4 PR 4) #2517

[fullsend-ai-triage]

🤖 Finished Triage · ✅ Success · Started 7:14 PM UTC · Completed 7:16 PM UTC
Commit: 4e21a60 · View workflow run →

[fullsend-ai-triage]

Triage Assessment

This issue is well-described — specific file, line number, root cause, and proposed fix direction are all provided. However, PR #2517 (which removes OrgConfig.Agents from the Go backend) is still open and unmerged. The agents block has not yet been removed from main, so the web admin code is not yet broken.

This issue is blocked on PR #2517 merging first. Once that lands, the agentsFromConfig() function in orgConfigParse.ts will need to be updated to derive agent roles from defaults.roles instead of the removed agents block.

Marking as blocked until PR #2517 merges.

Blocked by:

• refactor(config): remove OrgConfig.Agents field (ADR-0045 Phase 4 PR 4) #2517

---

Labels: Blocked on unmerged PR #2517; priority/medium as a follow-up cleanup with no production impact until the prerequisite lands.