Improve agent loop, tools, and research subagent for long-running autonomous tasks

fix: move import/signature validation to sandbox, keep host-side lightweight

Improve tool output quality: ANSI stripping, tail-biased truncation, noise suppression