fix(ai): accept forward-compatible Codex web-search results

[first-assist]

Summary

• align completed native web-search items with the generated Codex 0.148.0 action contract, including empty queries for non-search actions
• bound the complete opaque result array while exposing only recognized text results that pass HTTPS, normalized-domain, reference, field-size, and active-domain-policy validation
• accept unexposed result extensions and future opaque result kinds without weakening frame correlation, lifecycle pairing, or call ceilings
• release graphql-orm-ai 0.95.1 with unchanged schema module 0.63.0

Verification

• focused native web-search tests: 5 passed
• complete SQLite + provider-codex-app-server lane: 326 passed, 2 intentionally ignored; integration and doc tests passed
• warnings-denied Clippy and missing-docs-denied Rustdoc
• PascalCase naming contract
• PostgreSQL and MSSQL compile-only lanes
• documentation, inventory, release state/policy, workspace dependency, deterministic manifest, SemVer, formatting, and diff checks
• committed diff and this PR body contain no consumer-specific vocabulary

Documentation impact

• Documentation updated
• No documentation impact

Explanation: README, changelog, migration guide, implementation status, version, lockfile, and generated package inventory describe the compatible provider-contract fix.