fix(agent-wsl-lucas): enable device_mesh + trim tools_allowed a registry real

device_mesh.enabled=true + host=wsl-lucas. tools_allowed limitado a los 14
tools que existen en pkg/tools/devicemesh (0144a). Removidos project.*,
screenshot, clipboard.*, delegate_sudo, memory.* (futuros 0144d/e).

agents/agent-wsl-lucas/config.yaml

@@ -94,14 +94,17 @@ llm:
 # Cada tool name mapea a una capability del device_agent remoto via mesh WG.
 # Issue 0144 §2.1. Subset user|both. NO incluye scope=sudo.
 device_mesh:
-  enabled: false
+  enabled: true
   device_id: wsl-lucas
+  host: wsl-lucas
   mode: user
   manifest_id: manifest_wsl-lucas_v1
   device_agent_url_env: AGENT_WSL_LUCAS_DEVICE_MESH_URL
   client_timeout_s: 60
+  timeout_seconds: 60
   tools_allowed:
     - exec
+    - shell.eval
     - fs.read
     - fs.write
     - fs.list
@@ -109,25 +112,11 @@ device_mesh:
     - git.clone
     - git.commit
     - git.push
-    - git.status
     - pkg.search
     - proc.list
-    - proc.kill
     - docker.list
     - docker.exec
     - docker.logs
-    - project.create
-    - project.list
-    - screenshot
-    - clipboard.read
-    - clipboard.write
-    - delegate_sudo
-    - current_time
-    - memory.recall
-    - memory.note
-  rate_limit:
-    tools_per_minute: 60
-    tools_per_turn: 12
 
 # ============================================
 # TOOLS — built-in (current_time, memory, knowledge)