Agents Upgrade Plan

refactor: simplify provider/session coupling so compute_web_search_settings shares normalization utilities
docs: clarify cloud vs local env configuration (api key precedence, insecure toggle) in configuration guide
ci: add targeted regression job for ollama providers covering chat, streaming, and tool execution paths