feat(pi-overflow): 新增统一的新工具结果展示截断扩展

此前截断分散在多层且互相冲突：Pi bash 保留尾部 50KB，RTK 兜底截断又只留
开头 12000 字符（砍掉报错与完整输出路径），pi-chrome 截开头 30K，web_fetch
各 provider 不一致。新扩展统一负责"新结果给模型看多少"：
- capture.ts 最先加载暂存原文，index.ts 最后加载（system-prompt 之前）
- 超过 24K 字符时原文落盘 <agentDir>/my-pi/pi-overflow/（700/600、原子写），
  优先取 bash fullOutputPath 完整文件；模型看到 头 + 中段信号行 + 尾 的有界
  视图，行号基于落盘原文、结尾永远可见
- overflow_query：按 id 正则搜索、行区间、jsonPath 只读查询，id 校验防穿越
- 收编：RTK truncate 默认关闭、删除 pi-chrome truncateText、web_fetch 默认
  每页 20000（上限 100000）、web_search max_results 限定 1–20
- pi-compaction 遮蔽带 details.overflow.id 的结果时在占位符提示 overflow_query
- 登记 tools.jsonc / routing / 权限 allow / tool-search 常驻与分组

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

pi-tool-search/CHANGELOG.md

@@ -12,6 +12,7 @@
 - Added checked-in authoritative groups for every tool exposed by the standard my-pi bundle, eliminating first-use model generation and user caching unless unrecognized third-party tools are present.
 - Replaced the Hermes and third-party Hippo assignments with the five tools exposed by the official Hippo Pi extension, grouped into recall and management workflows.
 - Replaced the retired Hippo `hippo_*` assignments with the vendored Hermes memory extension's six tools, grouped into `memory-recall` (`memory_search`, `session_search`, `context_tree_query`) and `memory-management` (`memory_add`, `memory_replace`, `memory_remove`, `skill_manage`).
+- Added `overflow_query` to `memory-recall` and pinned it in `alwaysEnabled` — inspecting a pi-overflow-stored original must not depend on a `tool_search` activation.
 - Added the enabled bundle's `Agent`, `get_subagent_result`, and `steer_subagent` tools to a checked-in `subagents` orchestration group.
 - Added authoritative `ssh-connection`, `ssh-remote-files`, `ssh-remote-search`, and `ssh-remote-shell` groups for the maintained `pi-ssh` tools, keeping reviewed connection, bounded discovery, structured file operations, and reviewed shell execution separate; the connection workflow now requires sequential `ssh_connect` to succeed before dependent tools.
 - Added sequential `ssh_cd` to the authoritative remote-shell workflow and direct the model to wait for a successful workspace change before dependent remote calls, avoiding both the unknown-tools fallback and cwd races.