feat: add web_search capability to all agents and hands (#74)

Adds the web_search tool to every agent.toml and hand HAND.toml that did
not already declare it. Without this capability the runtime gates the
tool with 'Capability denied: tool not in allowed list', leaving agents
unable to perform web searches even when a search provider is
configured.

For tools arrays that already contained web_fetch, web_search is
inserted directly after it (its natural companion). For arrays without
web_fetch, web_search is appended to the end.

24 files updated total: 21 agents and 3 hands.

agents/tutor/agent.toml

@@ -85,6 +85,7 @@ tools = [
   "memory_recall",
   "shell_exec",
   "web_fetch",
+  "web_search",
 ]
 network = ["*"]
 memory_read = ["*"]