tools.agpm_tools module

MDOP AGPM discovery via WinRM (read-only).

AGPM cmdlets are shipped with the AGPM client (MDOP), not standard RSAT. This tool only lists modules/commands matching Agpm/MDOP so operators can confirm cmdlet names, then use winrm_run_ps with organization-approved scripts for checkout/check-in, or extend allowlists after discovery.

Security: UNSANDBOXED_EXEC. Same WinRM session pattern as group_policy_api.