Agent harness

The runtime around a model that owns the agent loop, tools, context, permissions, and recovery. Distinct from the model itself, a repository harness, and a multi-run orchestrator.