Built-in model-selected artifact attachment tool.

The tool returns metadata only. The Runner resolves committed references into bounded ephemeral model parts for the next request; artifact bytes are never copied into the durable tool response or session state.