Require explicit trust for project-only agents

Check trust overrides and saved project trust before exposing project agents, so repositories trusted only implicitly by Pi do not auto-enable .pi/agents-based agents.