fix(cli): keep session search tools opt-in on shipped surfaces

The shipped-roster change made @deepseek-ai/dsh-tool-session-query a
default row of the shared base.cordis.yml, so the TUI and Web surfaces
put the five session-search tools in front of the model. That
contradicts the recorded opt-in stance for the model-facing session
query consumer; the ACP example remains the mounted reference.

Remove the row from the shared base, the now-dangling disabled patch in
the opt-in core-web profile, and the workspace dependency. The
ctx.sessionQuery index stays: the TUI's /resume and the Web content
search consume it directly. Both shipped-composition tests now pin the
20-tool catalog.

apps/cli/config/base.cordis.yml

@@ -316,12 +316,6 @@
     subagentProvider: spawn
     maxRounds: 64
 
-- id: tool-session-query
-  name: '@deepseek-ai/dsh-tool-session-query'
-  config:
-    maxSearchResults: 100
-    searchTimeoutMs: 30000
-
 - id: tool-str-replace-editor
   name: '@deepseek-ai/dsh-tool-str-replace-editor'
   config:

apps/cli/config/core-web.cordis.yml

@@ -45,9 +45,6 @@
 - id: tool-ralph
   disabled: true
 
-- id: tool-session-query
-  disabled: true
-
 - id: tool-str-replace-editor
   disabled: true