feat(agent): complete EvoAgent integration for all 6 agent roles

Migrate all agent roles from Legacy to EvoAgent architecture:
- fundamentals_analyst, technical_analyst, sentiment_analyst, valuation_analyst
- risk_manager, portfolio_manager

Key changes:
- EvoAgent now supports Portfolio Manager compatibility methods (_make_decision,
  get_decisions, get_portfolio_state, load_portfolio_state, update_portfolio)
- Add UnifiedAgentFactory for centralized agent creation
- ToolGuard with batch approval API and WebSocket broadcast
- Legacy agents marked deprecated (AnalystAgent, RiskAgent, PMAgent)
- Remove backend/agents/compat.py migration shim
- Add run_id alongside workspace_id for semantic clarity
- Complete integration test coverage (13 tests)
- All smoke tests passing for 6 agent roles

Constraint: Must maintain backward compatibility with existing run configs
Constraint: Memory support must work with EvoAgent (no fallback to Legacy)
Rejected: Separate PM implementation for EvoAgent | unified approach cleaner
Confidence: high
Scope-risk: broad
Directive: EVO_AGENT_IDS env var still respected but defaults to all roles
Not-tested: Kubernetes sandbox mode for skill execution

backend/api/workspaces.py

@@ -1,8 +1,9 @@
 # -*- coding: utf-8 -*-
 """
-Workspace API Routes
+Workspace API Routes.
 
-Provides REST API endpoints for workspace management.
+These routes manage the design-time `workspaces/` registry, not the run-scoped
+runtime data under `runs/<run_id>/`.
 """
 from typing import Any, Dict, List, Optional
 
@@ -31,7 +32,7 @@ class UpdateWorkspaceRequest(BaseModel):
 
 
 class WorkspaceResponse(BaseModel):
-    """Workspace information response."""
+    """Design-time workspace information response."""
     workspace_id: str
     name: str
     description: str
@@ -89,10 +90,10 @@ async def list_workspaces(
     manager: WorkspaceManager = Depends(get_workspace_manager),
 ):
     """
-    List all workspaces.
+    List all design-time workspaces.
 
     Returns:
-        List of workspaces
+        List of design-time workspaces
     """
     workspaces = manager.list_workspaces()
     return WorkspaceListResponse(