Resolved eval agent() and task tool defaults from the active spawn policy so restricted agents advertise and execute an allowed default. Fixes #3973