* fix(subagents): require test evidence beyond build success * test(subagents): isolate test evidence from sandbox file readers