test(langchain): add LC-103 fixture coverage

[jiaxinaspenlin-dotcom]

Summary

Adds the engine-side fixture and test coverage for LC-103, which detects LangChain agents that wire langchain_community's Requests* built-in HTTP tools.

What changed

• Mirrored LC-103 into:
  • testdata/rules-fixture/langchain/agent_safety.yaml
• Added three agent-rule test cases in:
  • internal/rules/policies_test.go

Coverage includes:

• FIRE: ReactAgent with RequestsGetTool
• FIRE: AgentExecutor with RequestsPostTool
• SILENT: ReactAgent with TavilySearchResults

Every AgentDef sets Language.

No analyzer changes were required because the existing LangChain hosted-tool discovery already recognizes all five Requests* classes.

Validation

• go vet ./... — pass
• go test -race ./internal/rules/... — pass
• go test -race ./... — 26 packages passed, 0 failures
• go build -o /tmp/trustabl ./cmd/trustabl — pass
• check-rules-sync.sh — in sync with production

The fixture is byte-identical to the corresponding rule definition in trustabl-rules.

Paired changes

• feat(langchain): add LC-103, agent wires a raw HTTP Requests built-in tool trustabl-rules#103 — LC-103 rule definition
• docs(langchain): add LC-103 rationale for Requests built-in tools trustabl-rulebook#79 — LC-103 rationale documentation

All coordinated changes use the shared branch:

feat/langchain-requests-builtin-tool