fix(example): drop the never-activated bash stack from the inheritance fixture

dsh-bash-local injects `subprocess`, which this tree never mounted, so the bash
chain sat PENDING and the bundle's tool-bash waited with it. The shared boot()
all-ACTIVE assertion now surfaces that as a load failure.

The scenario probes filesystem confinement only, so the rows are removed and the
bundle opts out with `toolBash: false`. The recorded transcript is unchanged
because bash never reached the model.

examples/headless-agent/subagent-inheritance.cordis.snapshot.yml

@@ -16,11 +16,6 @@
 - id: replay
   name: '@deepseek-ai/dsh-llm-replay'
 
-- id: bash
-  name: '@deepseek-ai/dsh-bash-local'
-  config:
-    timeoutMs: 60000
-
 # The confining filesystem stack: the wide deployment default lives on the
 # shared policy home; the seeded parent's read-only override must beat it
 # INSIDE the child for the scenario to deny.
@@ -39,6 +34,9 @@
 - id: tool-fs
   name: '@deepseek-ai/dsh-tool-fs'
 
+# This scenario probes filesystem confinement only, so the bash stack is absent:
+# without it the bundle's `toolBash: false` is required, because `tool-bash` would
+# otherwise wait forever for a `bash` executor this tree never mounts.
 - id: agent
   name: '@deepseek-ai/dsh-agent-spine-demo'
   config:
@@ -46,6 +44,7 @@
     workspaceContext: false
     skills:
       enabled: false
+    toolBash: false
     toolTasks: false
     goals: false