[ai] Forbid leaf watchers and SendMessage reports

A leaf's return value is its report; an agent type is not a reachable
address. A performer's turn ends only at a real task boundary.