Harden weather coordinate handling

[asim]

Summary

• Validate weather coordinates before API calls so invalid agent/tool requests degrade with a clear unavailable message.
• Return a 400 for out-of-range weather API coordinates.
• Show the weather card as unavailable when a provider fetch fails without cached data.
• Add short tests for coordinate validation and invalid forecast requests.

Closes #744