AGA: Cryptographic Governance Receipts & Verifiable Tool Calls