fix(desktop): bound remote agent mention authorization (#6224)