378ee39b19
[tools.research].enabled now defaults true, matching shell/file tools. Safe because web_fetch is T2 — nothing leaves the machine without operator approval regardless of the flag; the flag only controls whether the tools are registered. web_search (T1) hits only the configured SearXNG endpoint.