Intent-Based Access Control (IBAC) – FGA for AI Agent Permissions