feat(agent): add trusted homes and confined transcript readers

Track independently resolved agent homes in a bounded per-user registry and model built-in session layouts beneath those homes. Validate transcript candidates without following links below the trusted root.

Provide confined streaming and byte-based transcript analysis, including subagent inventory and token usage. Reuse reader parsers and descriptor-size hints to avoid unnecessary transcript buffering.