feat(langchain_v1): Add ShellToolMiddleware and ClaudeBashToolMiddleware

[nfcampos]

• Both middleware share the same implementation, the only difference is one uses Claude's server-side tool definition, whereas the other one uses a generic tool definition compatible with all models
• Implemented 3 execution policies (responsible for actually running the shell process)
  • HostExecutionPolicy runs the shell as subprocess, appropriate for already sandboxed environments, eg when run inside a dedicated docker container
  • CodexSandboxExecutionPolicy runs the shell using the sandbox command from the Codex CLI which implements sandboxing techniques for Linux and Mac OS.
  • DockerExecutionPolicy runs the shell inside a dedicated Docker container for isolation.
• Implements all behaviours described in https://docs.claude.com/en/docs/agents-and-tools/tool-use/bash-tool#handle-large-outputs including timeouts, truncation, output redaction, etc

[nfcampos]

This is moved from PIIMiddleware so the same logic can be used for shell output redaction

[codspeed-hq]

CodSpeed Performance Report

Merging #33527 will not alter performance

_{Comparing nc/16oct/bash-middleware (4251de4) with master (34de8ec)¹}

Summary

✅ 3 untouched
⏩ 31 skipped²

Footnotes

1. No successful run was found on master (e0e1142) during the generation of this report, so 34de8ec was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩

2. 31 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

[sydney-runkle]

let's merge tonight 😈