feat: make managed tool mediation additive

[mostlydev]

Summary

• preserve runner-native tools when cllama injects managed tools
• pass through native-only tool-call responses and re-synthesize SSE when needed
• fail closed on mixed managed/native tool responses and cover the behavior in proxy tests

Testing

• go test ./internal/proxy/...