Provision a CDP-managed EVM wallet for any AI agent in one call. Returns address, private-key shard (non-custodial), and USDC-ready status on Base. Idempotent — safe to call multiple times.