feat: add web_search capability to all agents and hands (#74)

Adds the web_search tool to every agent.toml and hand HAND.toml that did
not already declare it. Without this capability the runtime gates the
tool with 'Capability denied: tool not in allowed list', leaving agents
unable to perform web searches even when a search provider is
configured.

For tools arrays that already contained web_fetch, web_search is
inserted directly after it (its natural companion). For arrays without
web_fetch, web_search is appended to the end.

24 files updated total: 21 agents and 3 hands.

agents/ops/agent.toml

@@ -45,7 +45,8 @@ periodic = { cron = "every 5m" }
 max_llm_tokens_per_hour = 50000
 
 [capabilities]
-tools = ["shell_exec", "file_read", "file_list"]
+tools = ["shell_exec", "file_read", "file_list",
+"web_search",]
 memory_read = ["*"]
 memory_write = ["self.*"]
 shell = [