Address the two remaining review warnings on PR #106.
- tools/post-execute: when a downstream listener/policy returns `block`,
return early without loading or attaching workspace instructions. The
registry turns a block into a final isError result, so reconciling off
the original successful result leaked instructions from a rejected call
and advanced nested/baseline tracking off a touch that never happened.
- Disable workspaceContext in the Code Mode examples: fs tools run as
run_code sub-dispatches and code-mode.ts drops sub-call additionalContext,
so dynamic AGENTS.md updates are silently discarded there.
Update the block regression test to assert no context is attached, and add
a waterfall case proving accept still surfaces the discovered instructions.
