feat(cowork): re-enable Claude Cowork with preset-only stdio MCP

Restore Cowork feature while closing the RCE vector: drop user-defined
stdio commands so only hard-coded preset plugins (browsermcp) may spawn.
Custom MCP now accepts remote URL only. Routes stay gated to localhost.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/shared/constants/cliTools.js

@@ -128,15 +128,14 @@ export const CLI_TOOLS = {
     description: "OpenCode AI Terminal Assistant",
     configType: "custom",
   },
-  // Cowork disabled: spawns arbitrary processes (RCE risk). Hidden from CLI tools UI.
-  // cowork: {
-  //   id: "cowork",
-  //   name: "Claude Cowork",
-  //   image: "/providers/claude.png",
-  //   color: "#D97757",
-  //   description: "Claude Desktop Cowork (third-party inference)",
-  //   configType: "custom",
-  // },
+  cowork: {
+    id: "cowork",
+    name: "Claude Cowork",
+    image: "/providers/claude.png",
+    color: "#D97757",
+    description: "Claude Desktop Cowork (third-party inference)",
+    configType: "custom",
+  },
   hermes: {
     id: "hermes",
     name: "Hermes Agent",