withheld-max-output-token-errors

Delay surfacing max-output-token failures until the recovery loop completes, then emit sanitized tool_result errors.