browser tool, pdf reading and readable web fetch all work. agents also got chromium, jq, ripgrep, less, unzip and a git identity so commit runs. no sudo, deliberately
added per-agent toggles for the github cli and self-scheduling, off unless you tick them at create.