Prevent orphaned tool outputs from triggering Codex 400s

[paarth-a]

Changes:

• Walk every request’s input, collect valid function_call.call_ids, and drop only those function_call_output entries whose call_id is missing, non-string, or unmatched—regardless of whether tools are configured—
  so Codex never receives phantom tool results while legitimate call/output pairs stay intact for compaction context (lib/request/request-transformer.ts).
• Added tests that mimic tool-enabled compaction/summary flows to confirm unmatched outputs are removed and matched pairs survive (test/request-transformer.test.ts).
• Synced package-lock.json metadata with the current package version.

Testing:

• Manual check: prompted Opencode to write a file (exercising the write tool) and verified the tool call/output round-trip completed without the No tool call found… 400.