Unify all agent write permissions; reconcile read-only prompt text

All 13 agents now use a uniform writable permission model
(edit: allow, bash: allow) so every agent can persist its deliverables
and artifacts instead of being sandbox-denied on project writes.
Orchestrator retains task: allow for dispatching.

Reconciled the three agents (explorer, detective, reviewer) that still
carried a 'Hard Read-Only Boundary' and read-only role-fence wording
which contradicted the new permissions and caused self-censoring:
rewritten as role fences (investigate/diagnose/review != implement/fix),
keeping the report IS the deliverable boundary and UNVERIFIED handoff.

Builder/tester/maintainer were already writable and unchanged.

agents/architect.md

@@ -7,30 +7,8 @@ mode: subagent
 # CAVEAT: an in-session "always allow" approval injects pattern:* allow that overrides these denies
 #         for every agent until the server restarts.
 permission:
-  edit:
-    "**": deny
-    "AgentsReport/architect/**": allow
-  bash:
-    "*": deny
-    "git status*": allow
-    "git log*": allow
-    "git diff*": allow
-    "git show*": allow
-    "git blame*": allow
-    "git reflog*": allow
-    "git merge-base*": allow
-    "git rev-parse*": allow
-    "git branch --list*": allow
-    "git branch -a*": allow
-    "git branch -r*": allow
-    "git ls-files*": allow
-    "git ls-tree*": allow
-    "head*": allow
-    "tail*": allow
-    "wc*": allow
-    "sort*": allow
-    "grep*": allow
-    "rg*": allow
+  edit: allow
+  bash: allow
   webfetch: deny
   websearch: deny
   skill: deny