Manifest connect is for CI runners

The manifest/OIDC path only works for an agent running inside GitHub Actions or GitLab CI — that's what issues the short-lived token it authenticates with. Running somewhere else? Use an API key instead — same moderation, same quotas, same everything except how you prove who you are.