feat(tasks): wire the task tools into the remaining code-work workflows

Extend the role_pipeline wiring to the other workflows that act on a code work
item, matching each stage's tier:

- freestyle_planning: analyst (read-only) gets task_search/task_context to find
  related work and ground the analysis; prompt updated to match.
- review_loop: implement gets the full set (claim, submit_for_review, notes),
  review gets task_context/task_update to complete on an approved verdict. Its
  prompt files don't ship, so the doctrine rides the L0 policy + tool descriptions.

Left untouched: research (external-research flow producing a report, not a code
work item), qa_ping (smoke test), and healthcheck (diagnostic) — none track work.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

examples/workflows/freestyle_planning.toml

@@ -1,11 +1,13 @@
 id = "freestyle_planning"
 start = "analyst"
 
+# analyst is read-only, so it gets only the read-only task tools: task_search to find related
+# or duplicate work and task_context to ground the analysis in an existing task.
 [[stages]]
 id = "analyst"
 prompt = "prompts/analyst_freestyle.md"
 produces = [{ name = "analysis", kind = "analysis" }]
-allowed_tools = ["file_read", "ShellTool"]
+allowed_tools = ["file_read", "ShellTool", "task_search", "task_context"]
 token_budget = 16384
 max_retries = 2