Why Agent Identity Belongs On-Chain