Contract polish: background Bash exit codes, SdkTool/AgentAsTool non-read-only
defaults, Runner ephemeral inherit, hitlMode fail-closed, budget tighten without
re-widen, corrupt memory fail-closed, structured JSON retry, turnsUsed per-op,
MCP list total deadline, Edit without fileinfo; AgentAsTool preserves MCP pump.