fix(prompts): let grants govern outside-workspace plugin reads (#1079)

Permission grants already govern outside-workspace reads, including the yolo exemption, so a prompt-level ban diverges from enforcement and blocks legitimate reads.

Author: TheGreatAxios

src/agent/prompts.ts

@@ -94,7 +94,7 @@ export function buildHarnessFacts(
     ...(dynamicTools
       ? [
           "- Core tools plus the advertised catalog (including skill_search) are resident. Use tool_search to load extra capabilities from plugins or integrations when needed.",
-          "- Use search_agents before dispatching named specialists or teams (ids and descriptions by default; include_body=true for the loaded system prompt). Do not read_file plugin paths outside the workspace.",
+          "- Use search_agents before dispatching named specialists or teams (ids and descriptions by default; include_body=true for the loaded system prompt).",
           "- The user may send follow-up messages while workers run; they are queued. Enter delivers at the next parent tool.boundary; Alt+Enter on session-idle. A long parent tool holds that boundary. Update your plan, spawn or adjust workers, and keep the operator informed.",
         ]
       : ["- The tools below are your full toolset."]),