Oracle, Librarian, Explore, Momus, and Metis could modify files via apply_patch despite being read-only agents. Also fixed duplicate task entries in Librarian and Explore restriction lists.
