Files in tool calls

Tools can now return and accept file attachments, with stable, checked links so an agent can hand a file back without the link breaking later.