chore: consume authoritative Agents API parameter bindings

[chubes4]

Problem

Automattic/agents-api#447 adds the generic authoritative: true tool parameter binding required to propagate security-sensitive caller context without model override. Data Machine currently pins Agents API at c1183c44; Roadie cannot safely consume the new contract until the dependency is updated and ToolExecutor integration is verified.

Required change

• Update the wordpress/agents-api locked dependency to include fix: support authoritative tool parameter bindings Automattic/agents-api#447 (a4765649).
• Add Data Machine integration coverage proving authoritative caller-context bindings survive ToolExecutor preparation, cannot be overridden by model arguments, preserve explicit zero, and are removed from provider-facing schemas.
• Preserve existing ordinary binding behavior and generic layer purity.
• Do not add Roadie or Extra Chill special cases.

Dependency

• fix: support authoritative tool parameter bindings Automattic/agents-api#447
• fix: support authoritative non-overridable tool parameter bindings Automattic/agents-api#446
• fix: align Roadie access with canonical agent grants extrachill-roadie#85