Mark subagent results as untrusted output

CHANGELOG · original

Changed subagent results to reach the main agent under a header marking them as subagent output, with the result indented, so text in a subagent's result cannot pass as the session's own instructions