feat(infra): port tool system ke TypeScript (37 tools + registry + executor)

Fase 3b rewrite Zesdex dari Rust ke TypeScript/Bun:
- Tool interface, ToolCtx + ToolCtxBuilder, InfrastructureToolExecutor
- Registry: allTools (37 tool), toolDefs, toolIsRisky, toolIsParallelSafe
- FS tools: read, write, edit, delete
- Search: grep, glob (glob matcher ringan)
- Shell: bash (timeout + timeout_spawn), bash_output, bash_kill
- Git: git_operator, git_worktree, git_cred + checkGitDestructive, checkCredentialRead
- Memory: remember, forget, recall via MarkdownMemoryRepository
- Utilitas: cd, dir_list, dir_cache_update, pong, todowrite, todofinish
- Best-practice: best_practice, commit_convention + BestPracticeEngine
- Web search (async fetch ke SearXNG), semantic_search/rebuild_index/list_symbols
- Workflow/spawn/parallel_delegate (delegasi ke engine 3c/3d dengan placeholder)
- Graduated checks + resolve_path sandbox (anti path-escape)
- 16 test tool system (registry, guards, resolve_path, fs roundtrip)

54 test hijau (38 lama + 16 baru), tsc strict bersih.

apps/packages/infrastructure/src/index.ts

@@ -4,4 +4,8 @@
  */
 export * from "./utils.ts";
 export * from "./llm/index.ts";
-export * from "./persistence/index.ts";
+export * from "./persistence/index.ts";
+export * from "./tools/mod.ts";
+export { InfrastructureToolExecutor } from "./tools/executor.ts";
+export { toolDefs, allTools, toolIsRisky, toolIsParallelSafe } from "./tools/registry.ts";
+export { BestPracticeEngine } from "./best_practice/engine.ts";