feat(tools): bound+frame tool results, spill full output to CAS, tool_output retrieval

Tool results injected into model context are now consistently framed and
globally bounded. Success output over the floor (TOOL_RESULT_MAX_CHARS=8000)
is head/tail-truncated with a marker naming a retrieval ref; the full raw
output spills to the artifact store (CAS) and its hash is recorded on the
ToolReceipt (fullOutputHash) in the event log. Agents recover the full text
via the new read-only tool_output(ref=...) tool.

- SessionOrchestrator: frameTruncatedToolResult + renderToolResult; char-cap
  head/tail so a single pathological long line can't defeat the bound.
- ToolReceipt.fullOutputHash (additive, nullable).
- ToolOutputTool (Tier T1, no fs capability) resolves ref -> full bytes.
- Wired via extraTools in Main.kt; tool_output added to ALWAYS_AVAILABLE_READ_TOOLS.
- Failure path keeps ERROR:/FATAL: prefixes (all-rejected breaker dependency).

Tests: FrameTruncatedToolResultTest, ToolOutputToolTest.

apps/server/src/main/kotlin/com/correx/apps/server/Main.kt

@@ -260,6 +260,9 @@ fun main() {
         com.correx.apps.server.tasks.EventStoreSessionFactRecorder(eventStore),
         com.correx.apps.server.tasks.EventStoreSessionWrites(eventStore),
     )
+    // Retrieves full tool output the kernel spilled to CAS on truncation (ref shown in-context).
+    val toolOutputTool = com.correx.infrastructure.tools.ToolOutputTool(artifactStore)
+    val extraTools = taskTools + toolOutputTool
     val toolRegistry = InfrastructureModule.createToolRegistry(
         buildToolConfig(
             workspaceRoot,
@@ -268,7 +271,7 @@ fun main() {
             toolsConfig,
             researchToolConfig,
         ),
-        extraTools = taskTools,
+        extraTools = extraTools,
     )
     val toolExecutor = InfrastructureModule.createToolExecutor(
         registry = toolRegistry,
@@ -301,7 +304,7 @@ fun main() {
     val wsToolRegistryProvider = WorkspaceToolRegistryProvider { workspace ->
         val wsRegistry = InfrastructureModule.createToolRegistry(
             buildToolConfigForWorkspace(workspace, shellAllowedExecutables, toolsConfig, researchToolConfig),
-            extraTools = taskTools,
+            extraTools = extraTools,
         )
         val wsExecutor = DispatchingToolExecutor(wsRegistry)
         WorkspaceTools(registry = wsRegistry, executor = wsExecutor)