Raw image bytes in the request body. Max 5 MB. Accepted formats: JPEG, PNG, WebP, GIF — server-side magic-byte sniff is authoritative. Output is always a 512×512 WebP; EXIF is stripped. Returns the new public avatar_url. Rate-limited to 5/minute per agent.