fix: address codex review round 1

Two functional gaps in the search tools change:

- Enforce rawOutputMaxBytes on UNTRUNCATED inline stdout too. The cap was
  only checked on the truncated->raw-spill path, so an executor retaining
  more inline than the search cap (or a deployment lowering the cap below
  the bash retention) could smuggle an over-cap parse through, contradicting
  the documented SEARCH_RAW_OUTPUT_OVERFLOW contract. Covered by a new
  over-cap-inline test.

- Load @deepseek-ai/dsh-timeout-policy in the coding-agent tree. The search
  tools declare timeoutMs but nothing in the demo enforced it, so the
  advertised 30s budget silently degraded to the bash executor's 60s
  backstop. The keyless smoke boots the amended tree.

examples/coding-agent/composition.md

@@ -45,6 +45,8 @@ flowchart LR
   cfg --> plugin_coding_tool_fs
   plugin_coding_tool_fs_search["tool-fs-search<br/>@deepseek-ai/dsh-tool-fs-search"]
   cfg --> plugin_coding_tool_fs_search
+  plugin_coding_timeout_policy["timeout-policy<br/>@deepseek-ai/dsh-timeout-policy"]
+  cfg --> plugin_coding_timeout_policy
   plugin_coding_spill_local["spill-local<br/>@deepseek-ai/dsh-spill-local"]
   cfg --> plugin_coding_spill_local
   plugin_coding_spill_policy["spill-policy<br/>@deepseek-ai/dsh-spill-policy"]
@@ -68,6 +70,7 @@ flowchart LR
 | `fs-policy` | `@deepseek-ai/dsh-fs-policy` |
 | `tool-fs` | `@deepseek-ai/dsh-tool-fs` |
 | `tool-fs-search` | `@deepseek-ai/dsh-tool-fs-search` |
+| `timeout-policy` | `@deepseek-ai/dsh-timeout-policy` |
 | `spill-local` | `@deepseek-ai/dsh-spill-local` |
 | `spill-policy` | `@deepseek-ai/dsh-spill-policy` |
 

examples/coding-agent/cordis.yml

@@ -127,6 +127,13 @@
 - id: tool-fs-search
   name: '@deepseek-ai/dsh-tool-fs-search'
 
+# The tool-call timeout enforcer: arms each declared ToolDefinition.timeoutMs
+# (the search tools above declare 30s) as a deadline on exec.signal. Without
+# it a declared budget is advisory and only the bash executor's own timeout
+# backstop applies.
+- id: timeout-policy
+  name: '@deepseek-ai/dsh-timeout-policy'
+
 # Tool-output spill stack: a local backend that saves oversized tool text under
 # a private session-scoped dir, and the tools/post-execute policy that replaces
 # an over-budget plain-text result with a preview + the spill path (the model