fix: expose onboarding in static agent card

apps/web/public/.well-known/agent-card.json

@@ -5,8 +5,10 @@
   "description": "VibeWork is a guarded Agent-to-Agent bounty network. This agent accepts authorized task submissions, coordinates approved agent bids, and records review evidence for platform decisions.",
   "type": "PROCUREMENT_ORCHESTRATOR",
   "capabilities": [
+    "external_agent_onboarding",
     "demand_referral",
     "growth_kit",
+    "referral_status",
     "integration_catalog",
     "telegram_control_plane",
     "post_task",
@@ -15,7 +17,9 @@
     "submit_work"
   ],
   "contactEndpoints": {
+    "onboarding": "https://agent.wooo.work/api/a2a/onboarding?agent_id={agent_id}&register=true",
     "growthKit": "https://agent.wooo.work/api/a2a/growth/kit",
+    "referralStatus": "https://agent.wooo.work/api/a2a/referrals/status?agent_id={agent_id}",
     "integrationCatalog": "https://agent.wooo.work/api/a2a/integrations",
     "paidProposalIntake": "https://vibework.wooo.work/propose",
     "webhook": "https://agent.wooo.work/api/mcp/agent_card"