agent-pre-step 1

Inbox input guard for dsh: a claimed inbox entry that is not a UserMessage crashes the turn inside whichever module reads it first, and the report names that reader - discussion #7363 ends ~1ms after turn/start, before any step/start, with "Cannot read pr