A production agent runs in an OCI-managed environment and should avoid distributing long-lived API keys. Which authentication direction is recommended?

1. Embed a developer's personal key in the container image
2. OCI IAM-based authentication using the appropriate workload identity
3. Use anonymous requests from the private subnet
4. Pass a shared secret through every user prompt