refactor(agents): move tools package to app/agents/shared (slice 6)

Relocate the entire new_chat/tools/ package (62 files incl. registry, hitl, MCP
cluster, and all connector subpackages: gmail/slack/discord/teams/drive/etc.)
to the shared kernel. The package turned out to be a clean cohesive cluster:
its only references to non-tools new_chat modules were comments, and its
middleware deps were already flipped to shared in slice 5c.

Flip 33 live importers (multi-agent, flows, routes, services, anonymous_agent,
tests). Re-export shims remain for the frozen single-agent stack: a package
__init__ mirroring the public surface (new_chat.__init__ imports it) plus
invalid_tool + registry submodule shims (chat_deepagent imports those).

Resolves slice 5c's two transient back-edges: shared/middleware/action_log
(TYPE_CHECKING ToolDefinition) and tool_call_repair (local INVALID_TOOL_NAME)
now point at app.agents.shared.tools.

surfsense_backend/app/agents/shared/middleware/action_log.py

@@ -3,7 +3,7 @@
 Wraps every tool call via :meth:`AgentMiddleware.awrap_tool_call` and writes
 a row to :class:`~app.db.AgentActionLog` after the tool returns. Tools opt
 into reversibility by declaring a ``reverse`` callable on their
-:class:`~app.agents.new_chat.tools.registry.ToolDefinition`; the rendered
+:class:`~app.agents.shared.tools.registry.ToolDefinition`; the rendered
 descriptor is persisted in ``reverse_descriptor`` for use by
 ``/api/threads/{thread_id}/revert/{action_id}``.
 
@@ -42,7 +42,7 @@ if TYPE_CHECKING:  # pragma: no cover - type-only
     # Type-only import: keeping it lazy avoids a module-load cycle through the
     # frozen single-agent package (new_chat.__init__ -> chat_deepagent ->
     # middleware shim). Resolves to app.agents.shared.tools once tools migrate.
-    from app.agents.new_chat.tools.registry import ToolDefinition
+    from app.agents.shared.tools.registry import ToolDefinition
 
 
 logger = logging.getLogger(__name__)

surfsense_backend/app/agents/shared/middleware/tool_call_repair.py

@@ -121,7 +121,7 @@ class ToolCallNameRepairMiddleware(
         # Local import avoids a module-load cycle through the frozen single-agent
         # package (new_chat.__init__ -> chat_deepagent -> middleware shim).
         # Resolves to app.agents.shared.tools once tools migrate.
-        from app.agents.new_chat.tools.invalid_tool import INVALID_TOOL_NAME
+        from app.agents.shared.tools.invalid_tool import INVALID_TOOL_NAME
 
         if INVALID_TOOL_NAME in registered:
             original_args = call.get("args") or {}