Document the new tools in the prompt and read-only variants

The tool guidance covers apply_patch and web_fetch, the approval line derives from the tools actually offered rather than a hardcoded edit-tool check, and plan and review gain approved web research when the net set is on.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

test/agents.test.ts

@@ -58,6 +58,10 @@ test('plan and review are read-only: no write, edit, or bash', () => {
   }
 });
 
+test('plan and review can use approved web research', () => {
+  for (const name of ['plan', 'review']) expect(variantByName(name)!.allowTools).toContain('web_fetch');
+});
+
 test('resolveAgent with no arguments yields the default', () => {
   expect(resolveAgent(undefined, undefined).name).toBe('default');
 });