fix(cli): keep session search tools opt-in on shipped surfaces

The shipped-roster change made @deepseek-ai/dsh-tool-session-query a
default row of the shared base.cordis.yml, so the TUI and Web surfaces
put the five session-search tools in front of the model. That
contradicts the recorded opt-in stance for the model-facing session
query consumer; the ACP example remains the mounted reference.

Remove the row from the shared base, the now-dangling disabled patch in
the opt-in core-web profile, and the workspace dependency. The
ctx.sessionQuery index stays: the TUI's /resume and the Web content
search consume it directly. Both shipped-composition tests now pin the
20-tool catalog.

packages/session-query/tool-session-query/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/session-query/tool-session-query/README.md
-README.md: 9a70f29d7c39af816c9efcf479ad129f0148883c
-README.zh.md: 55717aef20d53686cce963d09b2e41350d274a75
+README.md: d973daf1124c4be05f7335b18661d431d45be39f
+README.zh.md: b27d79a905a029d3750f24573e3c32785a314015