Gate project agents on trust status

Passes project trust state into agent discovery so untrusted workspaces only load user agents and starter creation writes under the user config instead of project-defined agents.