feat(providers): add native options and exact MCP grants (#3025)

* feat(providers): add native options and exact MCP grants

Keep provider policy in provider-owned schemas so unattended Hub runs can grant only requested tools from injected MCP servers. Preserve the native resolved sandbox policy when a workflow override is present, including configured writable roots.

* test(hub): verify real provider tool policy

* test(app): avoid pinning transient restart status

packages/protocol/src/schedule/types.ts

@@ -33,18 +33,8 @@ export const ScheduleTargetSchema = z.discriminatedUnion("type", [
       archiveOnFinish: z.boolean().optional(),
       isolation: z.enum(["local", "worktree"]).optional(),
       title: z.string().trim().min(1).nullable().optional(),
-      approvalPolicy: z.string().trim().min(1).optional(),
-      sandboxMode: z.string().trim().min(1).optional(),
-      networkAccess: z.boolean().optional(),
-      webSearch: z.boolean().optional(),
+      providerOptions: z.record(z.string(), z.json()).optional(),
       featureValues: z.record(z.string(), z.unknown()).optional(),
-      extra: z
-        .object({
-          codex: z.record(z.string(), z.unknown()).optional(),
-          claude: z.record(z.string(), z.unknown()).optional(),
-        })
-        .partial()
-        .optional(),
       systemPrompt: z.string().optional(),
       mcpServers: z.record(z.string(), z.unknown()).optional(),
     }),