Workflow tool: stricter schema validation for structured agent() output

Schemas passed to agent() for structured output in the workflow scripting API must now have {type: 'object', properties: {...}} at the root, and required must be a subset of properties. Unsatisfiable schemas now throw immediately at the agent() call instead of failing later.