account-upload bundle id resolves in. Bundle ids
are only unique per owner, so a card naming the bundle has to name the
scope too: the account’s default and the caller’s own default are
different plugins. The owner is never named — the agent resolves it from
the authenticated caller.