tetrate agentrouter identity wrap

Wrap a naked service account JSON file into the wrapper format:

  {"serviceAccount": {...}, "checksum": "<sha256>", "checksumAlgorithm": "sha256"}

Both tars and tare accept naked and wrapped files, so wrapping is optional.
Use it when you want the integrity guarantee of a checksum-verified file, or
when a tool explicitly requires the wrapper format.

If the file is already wrapped its checksum is recomputed and the file is
updated in place (same as 'tetrate agentrouter admin sa checksum --fix').

By default the result is written back to the same file.  Use --output to
write to a different path, or --output=- to print to stdout.

Examples:
  # Wrap in place
  tetrate agentrouter identity wrap identity.json

  # Write to a new file
  tetrate agentrouter identity wrap identity.json --output wrapped.json

  # Print to stdout (e.g. to inspect before saving)
  tetrate agentrouter identity wrap identity.json --output=-

Usage:
  tetrate agentrouter identity wrap <file> [flags]

Flags:
  -o, --output string   Output file path, or - for stdout (default: overwrite input file)

Global Flags:
  -q, --quiet     Suppress progress output; only errors and the final summary go to stderr
  -v, --verbose   Verbose output: plain-mode progress lines plus full per-blob chunk logs to stderr