Drop web_search/web_fetch from researcher and worker agents

The researcher now relies on its web skills (firecrawl) through safe_bash
instead of the web tool extensions; the worker's toolset shrinks to
read/write/edit/bash.

agents/worker.md

@@ -1,7 +1,7 @@
 ---
 name: worker
 description: General-purpose worker — reads, writes, and edits code
-tools: read, write, edit, bash, web_search, web_fetch
+tools: read, write, edit, bash
 subagent_agents: scout, researcher
 model: openai-codex/gpt-5.6-luna
 thinking: xhigh
@@ -26,7 +26,7 @@ Your context is finite. Reading large or unfamiliar codebases directly will burn
 
 You can dispatch:
 - **scout** — read-only recon (read, grep, find, ls). Returns a structured map of files, line ranges, and key snippets. Cheap (haiku). Use for *exploring unfamiliar territory*.
-- **researcher** — web research (web_search, web_fetch). Returns a sourced brief. Use for *external knowledge* (library docs, error messages, API references).
+- **researcher** — web research. Returns a sourced brief. Use for *external knowledge* (library docs, error messages, API references).
 
 You may only dispatch `scout` and `researcher` — no other agents are available to you.