feat: 落地编码基本工具与 plan_*

[SATA260]

改了什么 / What changed

• 注册 read / write / edit / ls / grep / find / bash / powershell 与 plan_*；工具定义留在 internal/agent/tools，初始化只注入 Execute 用的 Ports。
• 路径走 jail：会话 workspace_id 优先，目录外 Inspect 失败；工作区内 .cursor/*.md 的 write 可跳过审批。
• 时间线增加计划预览。Git 用户操作仍走 HTTP + pkg/git，不进 Agent Tool。

怎么验证 / How to verify

• cd server && go test ./...
• pnpm test:client
• fake 模型调用 read / ls 能读到会话工作目录；write 在 ask_for_approval 下开审批，auto_approve / yolo 直接写
• 写会话目录外路径应失败，不能当成功
• plan_write 只落在 .cursor/*.md，时间线出现计划预览

相关 Issue / Related issue：#19

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 56d4dfdb-b764-46f9-b73b-24732c0c2712

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}