move instructions logging earlier and clarify built-in tool logs

Log the instructions box immediately after instruction resolution in main, and standardize agent permission summaries to debug-level "disallowed built-ins" output to reduce confusion with pullfrog MCP tools.

Co-authored-by: Cursor <cursoragent@cursor.com>

agents/cursor.ts

@@ -440,5 +440,6 @@ function configureCursorTools(ctx: AgentRunContext): void {
 
   writeFileSync(cliConfigPath, JSON.stringify(config, null, 2), "utf-8");
   log.info(`» CLI config written to ${cliConfigPath}`);
+  log.debug(`» disallowed built-ins: ${JSON.stringify(deny)}`);
   log.debug(`» CLI config contents: ${JSON.stringify(config, null, 2)}`);
 }