fix(bundle): exclude product subagents from base

The Codex and Claude Code subagent providers were production dependencies of
@deepseek-ai/dsh-base and mounted by its Cordis composition, so every install of
the base bundle carried two providers that only some products want.

Drop both from the base bundle's dependencies and composition. The examples keep
them as explicit dependencies, base's tests lock their absence, and the product
preset e2e mounts the providers it needs explicitly.

Cherry-picked from #2387 (two commits squashed into one).

packages/bundle/base/cordis.patch.yml

@@ -302,15 +302,6 @@
       config:
         providerName: fork
 
-    # Product providers stay on the host plane because the registry is a
-    # process singleton. Agent presets decide whether their own model sees the
-    # matching delegation tools; loading either provider starts no product.
-    - id: subagent-codex
-      name: '@deepseek-ai/dsh-subagent-codex'
-
-    - id: subagent-claude-code
-      name: '@deepseek-ai/dsh-subagent-claude-code'
-
     # Continuable background children are selected per delegation tool. The
     # separately loaded follow-up tool registers the one global `send_message`.
     - id: tool-subagent-control

packages/bundle/base/package.json

@@ -85,8 +85,6 @@
     "@deepseek-ai/dsh-spill-local": "workspace:^",
     "@deepseek-ai/dsh-spill-policy": "workspace:^",
     "@deepseek-ai/dsh-subagent": "workspace:^",
-    "@deepseek-ai/dsh-subagent-claude-code": "workspace:^",
-    "@deepseek-ai/dsh-subagent-codex": "workspace:^",
     "@deepseek-ai/dsh-subagent-fork-in-process": "workspace:^",
     "@deepseek-ai/dsh-subagent-spawn-in-process": "workspace:^",
     "@deepseek-ai/dsh-subprocess-local": "workspace:^",

packages/bundle/base/tests/base.spec.ts

@@ -35,12 +35,10 @@ describe('dsh-base bundle', () => {
     expect(rows.find(row => row.id === 'session-telemetry-otel')?.config?.['mode']).toEqual({
       __jsExpr: "process.env.DSH_TELEMETRY_MODE || 'DISABLED'",
     })
-    expect(rows.filter(row => row.id === 'subagent-codex')).toHaveLength(1)
-    expect(rows.filter(row => row.id === 'subagent-claude-code')).toHaveLength(1)
-    expect(manifest.dependencies).toMatchObject({
-      '@deepseek-ai/dsh-subagent-codex': 'workspace:^',
-      '@deepseek-ai/dsh-subagent-claude-code': 'workspace:^',
-    })
+    expect(rows.filter(row => row.id === 'subagent-codex')).toHaveLength(0)
+    expect(rows.filter(row => row.id === 'subagent-claude-code')).toHaveLength(0)
+    expect(manifest.dependencies).not.toHaveProperty('@deepseek-ai/dsh-subagent-codex')
+    expect(manifest.dependencies).not.toHaveProperty('@deepseek-ai/dsh-subagent-claude-code')
   })
 
   it('gates each shell stack by platform with a symmetric disabled expression', () => {