Web-fetch agent retype via spawn hook is blocked without classifier review

A plugin's agent.spawn hook can no longer redirect a web-fetch tool dispatch to a different, unconfined agent unless it goes through classifier review; otherwise the spawn is blocked with an error that it cannot run unconfined without that review.