refactor(preset): trim the shell-row comments

Drop the filler and factually loose comments added with the tool-pwsh rows:
the platform expressions self-explain, the web-app overlay comment repeats
the file header, and the spec comments now state only the platform-scoped
evaluation fact.

apps/cli/config/agent-presets/code/agent.cordis.yml

@@ -46,18 +46,14 @@
 # the criterion for host-plane ownership — injection resolves before any session
 # exists, so there is no agent to key by. Behind a preset realm those variables
 # never reached the model's shell at all. Both shell tools consume the host
-# registry from here; the executors behind them (`bash-sandbox`/`pwsh-sandbox`)
-# are host-plane too, where the sandbox policy owns them. The web-app overlay
-# disables the host shell-tool rows, so exactly one of these rows mounts per
-# host — `tool-bash` on POSIX, `tool-pwsh` on win32.
+# registry from here; their executors (`bash-sandbox`/`pwsh-sandbox`) are
+# host-plane too.
 - id: tool-bash
   name: '@deepseek-ai/dsh-tool-bash'
-  # POSIX-only: the base composition swaps the bash stack for the pwsh stack on win32.
   disabled: !!js process.platform === 'win32'
 
 - id: tool-pwsh
   name: '@deepseek-ai/dsh-tool-pwsh'
-  # win32-only twin of tool-bash: bash has no Windows runner.
   disabled: !!js process.platform !== 'win32'
 
 # ── filesystem ──────────────────────────────────────────────────────────────

apps/cli/config/agent-presets/cordis/agent.cordis.yml

@@ -40,18 +40,14 @@
 # the criterion for host-plane ownership — injection resolves before any session
 # exists, so there is no agent to key by. Behind a preset realm those variables
 # never reached the model's shell at all. Both shell tools consume the host
-# registry from here; the executors behind them (`bash-sandbox`/`pwsh-sandbox`)
-# are host-plane too, where the sandbox policy owns them. The web-app overlay
-# disables the host shell-tool rows, so exactly one of these rows mounts per
-# host — `tool-bash` on POSIX, `tool-pwsh` on win32.
+# registry from here; their executors (`bash-sandbox`/`pwsh-sandbox`) are
+# host-plane too.
 - id: tool-bash
   name: '@deepseek-ai/dsh-tool-bash'
-  # POSIX-only: the base composition swaps the bash stack for the pwsh stack on win32.
   disabled: !!js process.platform === 'win32'
 
 - id: tool-pwsh
   name: '@deepseek-ai/dsh-tool-pwsh'
-  # win32-only twin of tool-bash: bash has no Windows runner.
   disabled: !!js process.platform !== 'win32'
 
 # ── filesystem ──────────────────────────────────────────────────────────────

apps/cli/config/agent-presets/standard/agent.cordis.yml

@@ -39,18 +39,14 @@
 # the criterion for host-plane ownership — injection resolves before any session
 # exists, so there is no agent to key by. Behind a preset realm those variables
 # never reached the model's shell at all. Both shell tools consume the host
-# registry from here; the executors behind them (`bash-sandbox`/`pwsh-sandbox`)
-# are host-plane too, where the sandbox policy owns them. The web-app overlay
-# disables the host shell-tool rows, so exactly one of these rows mounts per
-# host — `tool-bash` on POSIX, `tool-pwsh` on win32.
+# registry from here; their executors (`bash-sandbox`/`pwsh-sandbox`) are
+# host-plane too.
 - id: tool-bash
   name: '@deepseek-ai/dsh-tool-bash'
-  # POSIX-only: the base composition swaps the bash stack for the pwsh stack on win32.
   disabled: !!js process.platform === 'win32'
 
 - id: tool-pwsh
   name: '@deepseek-ai/dsh-tool-pwsh'
-  # win32-only twin of tool-bash: bash has no Windows runner.
   disabled: !!js process.platform !== 'win32'
 
 # ── filesystem ──────────────────────────────────────────────────────────────