Design an Async Sandboxed Agent Tool Runner with WASI 0.3

Use ratified WASI 0.3 async components with pinned runtime support, explicit capabilities, deadlines, backpressure, and safe cancellation.