fix(subagents): restrict read-only agent tools and remove machine-specific paths

browser-check and profiler get an explicit read-only tools list mirroring the
Codex sandbox_mode, and test-apk no longer hardcodes one contributor's
ANDROID_HOME and project paths.

.cursor/agents/browser-check.md

@@ -1,6 +1,7 @@
 ---
 name: browser-check
 model: composer-2.5-fast
+tools: Bash, Read, Grep, Glob
 description: Verifies UI changes in the browser using playwright-cli across Blink, Gecko, and WebKit. Use after making visual or interaction changes to React components, CSS, layouts, or routing to confirm they render and behave correctly.
 ---
 

.cursor/agents/profiler.md

@@ -1,6 +1,7 @@
 ---
 name: profiler
 model: composer-2.5-fast
+tools: Bash, Read, Grep, Glob
 description: Performance profiler that browses 5chan routes via playwright-cli, collecting Web Vitals and React rerender data via react-scan. Returns a structured issues list for a batch of routes. Use proactively when profiling browsing performance, finding bottlenecks, or diagnosing excessive React rerenders.
 ---
 

.cursor/agents/test-apk.md

@@ -8,8 +8,8 @@ You are an Android APK testing agent for the 5chan project. You run only the wor
 
 ## Environment
 
-- ANDROID_HOME: /Users/Tommaso/Library/Android/sdk
-- Project: /Users/Tommaso/Desktop/bitsocial/5chan
+- ANDROID_HOME: use the contributor's local Android SDK path from the environment (commonly `~/Library/Android/sdk` on macOS); do not hardcode another machine's path
+- Project root: the current repository root from `git rev-parse --show-toplevel`
 - Capacitor app (appId: fivechan.android)
 - AVD: fivechan-test-api35 (pixel_6, API 35, arm64-v8a)
 - PATH must include: $ANDROID_HOME/emulator, $ANDROID_HOME/platform-tools, $ANDROID_HOME/cmdline-tools/latest/bin