You can build an “default windows” agent via bakery and you can then use this msi for your installation.
To register an agent you can create an automation account with a secret, not a password (other flag on command line) to do the job. This is the intended use for automation accounts as far as I understand the concept.