[M4n5ter]

Summary

• Let WebSearch and WebFetch request permission for a host and port in a sandboxed conversation. The local process sandbox continues to block network access by default.
• Capture the inherited network ceiling on the Run when it differs from the process sandbox. The existing Web service applies the installation ceiling, checks the destination grant, and handles the permission interaction. Earlier Runs retain their captured boundary.

Refs #6913

Verification

• The default Workspace Write session completed an actual HTTP search against a loopback endpoint after Allow once. The endpoint received zero requests when approval was declined or permission requests were disabled.
• The existing direct tool and code mode acceptance suites exercise configured search with permission requests enabled and disabled.
• The Agent Facts, State, Engine, and Web tests pass. Format and diff checks pass.

AI use

• No generative tool made a substantive contribution
• Generative tooling made a substantive contribution

OpenAI Codex authored and verified the change.

Checklist

• Tests cover the change and fail without it
• Format, typecheck and the affected suites pass locally

Does this PR entail a change in behavior?

• Yes
• No